{"spdxVersion": "SPDX-2.3", "dataLicense": "CC0-1.0", "SPDXID": "SPDXRef-DOCUMENT", "creationInfo": {"created": "2026-10-12T07:37:37Z", "creators": ["Tool: Konflux", "Organization: Fedora"]}, "name": "buildah-1.45.1-1.1.hum1", "documentNamespace": "https://fedoraproject.org/buildah-1.45.1-1.1.hum1.spdx.json", "packages": [{"SPDXID": "SPDXRef-SRPM", "name": "buildah", "versionInfo": "1.45.1:1.45.1-1.1.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "buildah-1.45.1-1.1.hum1.src.rpm", "licenseDeclared": "Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/buildah@1.45.1-1.1.hum1?arch=src&epoch=2"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "e9a9e58a5f2e4160cef3560a114c5a6a50c421d6256a50d469d3591f26d5b036"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: b'\\x04i\\x99\\xe7\\xc3az\\xdf\\x9a\\x85<\\x86\\xb9$\\x1fJ'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sha256header: 384ce0b5bbf38d03460b7aa477a37f27d79f96e8f2796dd78941599c63fe9afb"}]}, {"SPDXID": "SPDXRef-aarch64-buildah", "name": "buildah", "versionInfo": "1.45.1:1.45.1-1.1.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "buildah-1.45.1-1.1.hum1.aarch64.rpm", "licenseDeclared": "Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/buildah@1.45.1-1.1.hum1?arch=aarch64&epoch=2"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "0985f3ed97951ed434d68d5eddeb7e378e7abd6f677c111fa7541bb4be074cb6"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: b'\\x1a\\xbe\\x84\\xeds/\\xc1\\x9b\\xf6\\x95\\x97\\xdd\\x01\\xaaN\\t'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sha256header: b2df9cb73cf8a7163b54ead40bf8f5751693dae98572588eb75f5dbed1bec018"}]}, {"SPDXID": "SPDXRef-s390x-buildah", "name": "buildah", "versionInfo": "1.45.1:1.45.1-1.1.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "buildah-1.45.1-1.1.hum1.s390x.rpm", "licenseDeclared": "Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/buildah@1.45.1-1.1.hum1?arch=s390x&epoch=2"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "c2f39918e573be056a3ba79c89243f3ce6c6a8eb89612c675b8235f3cfad239e"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: b\"[\\xe6\\x80j\\xe8T\\x85G\\xf8r'\\xb6\\xb2FJ&\""}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sha256header: 6fdaad2c229fbff55e5d3a57b47dd6e33b4ebfa221c9d0055207ef659838b696"}]}, {"SPDXID": "SPDXRef-x86-64-buildah", "name": "buildah", "versionInfo": "1.45.1:1.45.1-1.1.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "buildah-1.45.1-1.1.hum1.x86_64.rpm", "licenseDeclared": "Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/buildah@1.45.1-1.1.hum1?arch=x86_64&epoch=2"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "3280023bea959cd9bb4cc403e9294a4622ab5a36061ed57c8f601de3d5c07c97"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: b'F\\xb8\\xe6n\\xe4]i\\x07\\x9eI\\x1d\\xe3\\x1f\\xaa\\xb8F'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sha256header: 766fd59d547906560a444fba5cb1f78d122b8bc9c1c2adeabf364f09ef332f92"}]}, {"SPDXID": "SPDXRef-aarch64-buildah-debuginfo", "name": "buildah-debuginfo", "versionInfo": "1.45.1:1.45.1-1.1.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "buildah-debuginfo-1.45.1-1.1.hum1.aarch64.rpm", "licenseDeclared": "Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/buildah-debuginfo@1.45.1-1.1.hum1?arch=aarch64&epoch=2"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "fe4f3e41bfc6c4053471aad812929ce3d3fc9dbf2673ecbaf73a130b9149a92f"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: b'\\x0e\\\\\\xaa\\xecA\\x0b\\xf1\\xed%|\\x06\\xda\"\\xf6\\xcd\\xcc'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sha256header: 344a21ba1df775f5c0e0b3a44d6704b027aceeecf8b6e5ac5761b2b90d6a1699"}]}, {"SPDXID": "SPDXRef-s390x-buildah-debuginfo", "name": "buildah-debuginfo", "versionInfo": "1.45.1:1.45.1-1.1.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "buildah-debuginfo-1.45.1-1.1.hum1.s390x.rpm", "licenseDeclared": "Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/buildah-debuginfo@1.45.1-1.1.hum1?arch=s390x&epoch=2"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "b8e0b67f298c97afedd6d53da54f7d480c49909bea161584740ed871fc2d75a3"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: b'\\xddd\\xd4\\x02j0\\xec\\xae\\x9c\\xddu\\xde\\x12\\xacA\\xa9'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sha256header: 538027dc983f517a682dd3bad855f4618895c7e624dac6c57bf5754b497a297b"}]}, {"SPDXID": "SPDXRef-x86-64-buildah-debuginfo", "name": "buildah-debuginfo", "versionInfo": "1.45.1:1.45.1-1.1.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "buildah-debuginfo-1.45.1-1.1.hum1.x86_64.rpm", "licenseDeclared": "Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/buildah-debuginfo@1.45.1-1.1.hum1?arch=x86_64&epoch=2"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "cb86de1fe84163e8ed7a32ca5f1c15e48a6164a7f42445223f4de1ec3163e2c1"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: b'k\\xa7B\\xe0\\xe4`\\x06\\xfaY\\x0bh6\\x97\\x08-\\xae'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sha256header: 0f2681446b7eb83aedc8f66d16fef89dd9ec692e21403d305fec882d9a87bb49"}]}, {"SPDXID": "SPDXRef-aarch64-buildah-debugsource", "name": "buildah-debugsource", "versionInfo": "1.45.1:1.45.1-1.1.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "buildah-debugsource-1.45.1-1.1.hum1.aarch64.rpm", "licenseDeclared": "Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/buildah-debugsource@1.45.1-1.1.hum1?arch=aarch64&epoch=2"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "5f89aa793efeaee6ad27d0a352dffcc414938c6a473c54a4e4900c5418fbed03"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: b'0\\xeac%?\\xab\\x80}?e\\xdd?@AM\\x8b'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sha256header: a5a0b24a1453999be0cc05c73e72d27023660e2eddf18e055c112f094689b193"}]}, {"SPDXID": "SPDXRef-s390x-buildah-debugsource", "name": "buildah-debugsource", "versionInfo": "1.45.1:1.45.1-1.1.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "buildah-debugsource-1.45.1-1.1.hum1.s390x.rpm", "licenseDeclared": "Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/buildah-debugsource@1.45.1-1.1.hum1?arch=s390x&epoch=2"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "e1184348c74e0055fc974c44d97440642bda679d675e54c82d4ee19129e8b76d"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: b'\\xc6\\xf6\\x18\\x15l\\x93\\x01\\x02qY\\x81\\xf2\\xc6q\\xae\\xd8'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sha256header: ab52aef5239088f7276cb778dfc712f2eb3e55d2238532903d92406bf07c8ca7"}]}, {"SPDXID": "SPDXRef-x86-64-buildah-debugsource", "name": "buildah-debugsource", "versionInfo": "1.45.1:1.45.1-1.1.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "buildah-debugsource-1.45.1-1.1.hum1.x86_64.rpm", "licenseDeclared": "Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/buildah-debugsource@1.45.1-1.1.hum1?arch=x86_64&epoch=2"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "39c56542ae89fedceb7e64293437d7b6f3a44d5d03aa1b0eea48edd4df933a32"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: b'J\\xe6\\xde\\xa5%\\xbf\\x9a\\xfd\\xae\\x0fpR\\x19E\\x9f\\x05'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sha256header: 64798c02e3d5d7045f30fb3c0e16ea2ab19a0e496162f74cbdae2d0c69a526a5"}]}, {"SPDXID": "SPDXRef-Source0", "name": "v1.45.1", "versionInfo": "unknown", "packageFileName": "v1.45.1.tar.gz", "downloadLocation": "https://src.fedoraproject.org/repo/pkgs/rpms/buildah/v1.45.1.tar.gz/sha512/e3fe336421e20938fb486a06f0321729c22e3b457ae9c9ec81c6ffeb0bdc85470bfe42caba152e383c1fe9cd2625eea90e9c593726f384c2fbe4bf64de3a8ddd/v1.45.1.tar.gz", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "b48e701c75a2bd30dfe63fda5f886c8a7e0c3dd17b6aa0feb74cc93099254ca4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/v1.45.1?download_url=https://src.fedoraproject.org/repo/pkgs/rpms/buildah/v1.45.1.tar.gz/sha512/e3fe336421e20938fb486a06f0321729c22e3b457ae9c9ec81c6ffeb0bdc85470bfe42caba152e383c1fe9cd2625eea90e9c593726f384c2fbe4bf64de3a8ddd/v1.45.1.tar.gz&checksum=sha512:e3fe336421e20938fb486a06f0321729c22e3b457ae9c9ec81c6ffeb0bdc85470bfe42caba152e383c1fe9cd2625eea90e9c593726f384c2fbe4bf64de3a8ddd"}]}, {"SPDXID": "SPDXRef-Source0-origin", "name": "v1.45.1", "versionInfo": "unknown", "downloadLocation": "https://github.com/containers/buildah/archive/v1.45.1.tar.gz", "packageFileName": "v1.45.1.tar.gz", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "b48e701c75a2bd30dfe63fda5f886c8a7e0c3dd17b6aa0feb74cc93099254ca4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/v1.45.1?download_url=https://github.com/containers/buildah/archive/v1.45.1.tar.gz&checksum=sha256:b48e701c75a2bd30dfe63fda5f886c8a7e0c3dd17b6aa0feb74cc93099254ca4"}]}, {"SPDXID": "SPDXRef-Buildroot-buildah-aarch64", "name": "buildah-buildroot-aarch64", "versionInfo": "da52d037", "downloadLocation": "NOASSERTION", "filesAnalyzed": false}, {"SPDXID": "SPDXRef-Buildroot-Package-R-srpm-macros-aarch64", "name": "R-srpm-macros", "versionInfo": "1.3.7-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/R-srpm-macros-1.3.7-3.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: af95299e83e51b62a40fa7a42d357077"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/R-srpm-macros@1.3.7-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-add-determinism-aarch64", "name": "add-determinism", "versionInfo": "0.7.3-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/a/add-determinism-0.7.3-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND MIT AND Unicode-DFS-2016 AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 OR MIT) AND (Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND (MIT OR Zlib OR Apache-2.0) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: f98d78029bd45bc3d649024a45ce17c6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/add-determinism@0.7.3-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-alternatives-aarch64", "name": "alternatives", "versionInfo": "1.33-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/a/alternatives-1.33-6.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: acd4c0c14bfe18cb245d0a16f0ddaa5a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/alternatives@1.33-6.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-annobin-docs-aarch64", "name": "annobin-docs", "versionInfo": "13.32-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/a/annobin-docs-13.32-1.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND GFDL-1.3-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 18d60a72e7a0be13693c92c6e0d885c9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/annobin-docs@13.32-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-annobin-plugin-gcc-aarch64", "name": "annobin-plugin-gcc", "versionInfo": "13.32-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/a/annobin-plugin-gcc-13.32-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND GFDL-1.3-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: d31e83b90c107057a1121d31ba56720d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/annobin-plugin-gcc@13.32-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ansible-srpm-macros-aarch64", "name": "ansible-srpm-macros", "versionInfo": "1-22.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/a/ansible-srpm-macros-1-22.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 6343ff368e5236625d015dbc91e70769"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ansible-srpm-macros@1-22.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-audit-libs-aarch64", "name": "audit-libs", "versionInfo": "4.2.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/a/audit-libs-4.2.1-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 6fac467d347d162d8ce3b35b75206dc5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/audit-libs@4.2.1-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-authselect-libs-aarch64", "name": "authselect-libs", "versionInfo": "1.8.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/a/authselect-libs-1.8.0-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: cd5e427a9ac955744855ae64718bafda"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/authselect-libs@1.8.0-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-authselect-aarch64", "name": "authselect", "versionInfo": "1.8.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/a/authselect-1.8.0-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 46131a5852d24b3400bd5d35be4d3661"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/authselect@1.8.0-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bash-aarch64", "name": "bash", "versionInfo": "5.3.20-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/b/bash-5.3.20-1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 30a04b74b74cb05b208221994a6fae69"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bash@5.3.20-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-binutils-aarch64", "name": "binutils", "versionInfo": "2.46.1-1.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/b/binutils-2.46.1-1.3.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-3.0-or-later WITH Bison-exception-2.2) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND BSD-3-Clause AND GFDL-1.3-or-later AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 759d77c418b9d81a7648d2791e5c42c7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/binutils@2.46.1-1.3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-btrfs-progs-devel-aarch64", "name": "btrfs-progs-devel", "versionInfo": "7.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/b/btrfs-progs-devel-7.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-only and LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: fcb6df8859bd1b96f82098797910d3ac"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/btrfs-progs-devel@7.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-btrfs-progs-aarch64", "name": "btrfs-progs", "versionInfo": "7.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/b/btrfs-progs-7.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 26dca1b423352fab755effab092e66b0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/btrfs-progs@7.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-build-reproducibility-srpm-macros-aarch64", "name": "build-reproducibility-srpm-macros", "versionInfo": "0.7.3-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/b/build-reproducibility-srpm-macros-0.7.3-3.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 4dea8bdbe97b4534f60d8a6d0b9c793c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/build-reproducibility-srpm-macros@0.7.3-3.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bzip2-libs-aarch64", "name": "bzip2-libs", "versionInfo": "1.0.8-24.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/b/bzip2-libs-1.0.8-24.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-4-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 7fe1a1592b12936460dc276a532df8e7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bzip2-libs@1.0.8-24.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bzip2-aarch64", "name": "bzip2", "versionInfo": "1.0.8-24.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/b/bzip2-1.0.8-24.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-4-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 83f0af4d4c241cc82118a298f501cb03"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bzip2@1.0.8-24.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ca-certificates-aarch64", "name": "ca-certificates", "versionInfo": "2026.2.90_v9.0.317-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/ca-certificates-2026.2.90_v9.0.317-1.1.hum1.noarch.rpm", "licenseDeclared": "MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: a195cd97c3daf258791a89c2b5af39d2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ca-certificates@2026.2.90_v9.0.317-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cmake-filesystem-aarch64", "name": "cmake-filesystem", "versionInfo": "4.3.0-5.6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/cmake-filesystem-4.3.0-5.6.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND MIT-open-group AND Zlib AND Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 3e3bf1983cdaf52b73e3fe028445d894"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cmake-filesystem@4.3.0-5.6.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cmake-srpm-macros-aarch64", "name": "cmake-srpm-macros", "versionInfo": "4.3.0-5.6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/cmake-srpm-macros-4.3.0-5.6.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND MIT-open-group AND Zlib AND Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: e2f14e03350d92477884a522df888c53"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cmake-srpm-macros@4.3.0-5.6.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-coreutils-common-aarch64", "name": "coreutils-common", "versionInfo": "9.12-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/coreutils-common-9.12-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-no-invariants-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 00432e73aa7e8f8d82bb41466441d4ed"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/coreutils-common@9.12-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-coreutils-aarch64", "name": "coreutils", "versionInfo": "9.12-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/coreutils-9.12-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-no-invariants-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: b7d057d25d185ea30f52ed55c681988a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/coreutils@9.12-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cpio-aarch64", "name": "cpio", "versionInfo": "2.15-10.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/cpio-2.15-10.2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: f77875899a01094a286314746b22d940"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cpio@2.15-10.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cpp-aarch64", "name": "cpp", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/cpp-16.2.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: a611ee4e61820fcf829400383ee9409c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cpp@16.2.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cracklib-aarch64", "name": "cracklib", "versionInfo": "2.10.3-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/cracklib-2.10.3-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 66b5b70f2e4c4e9c13428470d6643306"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cracklib@2.10.3-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-crypto-policies-config-default-aarch64", "name": "crypto-policies-config-default", "versionInfo": "20260812-1.git359ab16.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/crypto-policies-config-default-20260812-1.git359ab16.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 1e6fce169a2973e4f665428cb52ae9ad"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/crypto-policies-config-default@20260812-1.git359ab16.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-crypto-policies-aarch64", "name": "crypto-policies", "versionInfo": "20260812-1.git359ab16.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/crypto-policies-20260812-1.git359ab16.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 9756d9b800cfeafa3f39e494328a620e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/crypto-policies@20260812-1.git359ab16.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-curl-aarch64", "name": "curl", "versionInfo": "8.22.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/curl-8.22.0-1.1.hum1.aarch64.rpm", "licenseDeclared": "curl", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 7b537dee74129daa42cb345356cb49ea"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/curl@8.22.0-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cyrus-sasl-lib-aarch64", "name": "cyrus-sasl-lib", "versionInfo": "2.1.28-37.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/cyrus-sasl-lib-2.1.28-37.2.hum1.aarch64.rpm", "licenseDeclared": "BSD-Attribution-HPND-disclaimer", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 3008fe0f694661a96ab85a997c2588aa"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cyrus-sasl-lib@2.1.28-37.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-debugedit-aarch64", "name": "debugedit", "versionInfo": "5.3-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/d/debugedit-5.3-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 47dcf14fc5162a4b0c17db4dfcfc193e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/debugedit@5.3-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-device-mapper-devel-aarch64", "name": "device-mapper-devel", "versionInfo": "1.02.217-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/d/device-mapper-devel-1.02.217-1.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 292d3b30e5e81b9ad132dae16a6423a4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/device-mapper-devel@1.02.217-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-device-mapper-libs-aarch64", "name": "device-mapper-libs", "versionInfo": "1.02.217-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/d/device-mapper-libs-1.02.217-1.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 541b207e2784b2698b45d99cc6dba11b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/device-mapper-libs@1.02.217-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-device-mapper-aarch64", "name": "device-mapper", "versionInfo": "1.02.217-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/d/device-mapper-1.02.217-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 7ed6719df2e209ba5c3a9f714c03b83d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/device-mapper@1.02.217-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-diffutils-aarch64", "name": "diffutils", "versionInfo": "3.12-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/d/diffutils-3.12-6.2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: e35b767ef8917507a2fe4e6a910ca89f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/diffutils@3.12-6.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-dwz-aarch64", "name": "dwz", "versionInfo": "0.17-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/d/dwz-0.17-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND GPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 3c0f22ca90ca43fc789f6fe8cb2ad2bc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/dwz@0.17-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-e2fsprogs-libs-aarch64", "name": "e2fsprogs-libs", "versionInfo": "1.47.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/e2fsprogs-libs-1.47.4-2.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-only AND LGPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: a0d9e0e7a5b8fa4540f18452681b279c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/e2fsprogs-libs@1.47.4-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ed-aarch64", "name": "ed", "versionInfo": "1.22.6-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/ed-1.22.6-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-only AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: d9d972206c5fb68a5eb404b6bcef4ced"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ed@1.22.6-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-efi-srpm-macros-aarch64", "name": "efi-srpm-macros", "versionInfo": "6-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/efi-srpm-macros-6-9.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: cba49c2554beb37df9cc6bb744737e2b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/efi-srpm-macros@6-9.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-debuginfod-client-aarch64", "name": "elfutils-debuginfod-client", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/elfutils-debuginfod-client-0.196-1.1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-2.0-or-later OR LGPL-3.0-or-later)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: d8d203fd99c873559a67e6443ff174f2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-debuginfod-client@0.196-1.1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-libelf-aarch64", "name": "elfutils-libelf", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/elfutils-libelf-0.196-1.1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 33f3b0f1b90d80a0dadbd7cc447c364c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-libelf@0.196-1.1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-libs-aarch64", "name": "elfutils-libs", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/elfutils-libs-0.196-1.1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 0595a64126ec97eb4d56b5cd73a38777"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-libs@0.196-1.1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-aarch64", "name": "elfutils", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/elfutils-0.196-1.1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-2.0-or-later OR LGPL-3.0-or-later) AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 0d70f8163d0190e72edab57ffae31ffe"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils@0.196-1.1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-erlang-srpm-macros-aarch64", "name": "erlang-srpm-macros", "versionInfo": "0.3.11-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/erlang-srpm-macros-0.3.11-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 063020bc2b254fec865c06f313930cec"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/erlang-srpm-macros@0.3.11-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-expat-aarch64", "name": "expat", "versionInfo": "2.8.5-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/expat-2.8.5-1.2.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 6ff138c1441fc1b5f133acb582b3e364"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/expat@2.8.5-1.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-file-libs-aarch64", "name": "file-libs", "versionInfo": "5.48-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/file-libs-5.48-3.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause-Darwin AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: a540b886506755c536a09f999daa1c47"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/file-libs@5.48-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-filesystem-srpm-macros-aarch64", "name": "filesystem-srpm-macros", "versionInfo": "3.18-59.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/filesystem-srpm-macros-3.18-59.1.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: cff1a42588f4eb1a758735b668069a67"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/filesystem-srpm-macros@3.18-59.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-filesystem-aarch64", "name": "filesystem", "versionInfo": "3.18-59.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/filesystem-3.18-59.1.hum1.aarch64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 67a1cc536f9cab735cb846baefddb7ea"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/filesystem@3.18-59.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-file-aarch64", "name": "file", "versionInfo": "5.48-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/file-5.48-3.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause-Darwin AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 9f3d10d98787fff380b03a8f3e77102a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/file@5.48-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-findutils-aarch64", "name": "findutils", "versionInfo": "1:4.11.0-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/findutils-4.11.0-2.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: f6ec1178a2de3f3dd2e67aab0bfa51f7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/findutils@4.11.0-2.1.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-fonts-srpm-macros-aarch64", "name": "fonts-srpm-macros", "versionInfo": "1:5.0.0-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/fonts-srpm-macros-5.0.0-4.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 72e451571f24737949a256d091508d0c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/fonts-srpm-macros@5.0.0-4.hum1?arch=noarch&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-forge-srpm-macros-aarch64", "name": "forge-srpm-macros", "versionInfo": "0.4.0-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/forge-srpm-macros-0.4.0-5.hum1.noarch.rpm", "licenseDeclared": "GPL-1.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: bfbed65969ec708556df3750591a377d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/forge-srpm-macros@0.4.0-5.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-fpc-srpm-macros-aarch64", "name": "fpc-srpm-macros", "versionInfo": "1.3-17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/fpc-srpm-macros-1.3-17.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 1f7e4cb902ccc37236f8d34ff8873cf2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/fpc-srpm-macros@1.3-17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gap-srpm-macros-aarch64", "name": "gap-srpm-macros", "versionInfo": "2-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gap-srpm-macros-2-3.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 70e3423696085d13791fefc0be7cdf15"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gap-srpm-macros@2-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gawk-aarch64", "name": "gawk", "versionInfo": "5.4.1-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gawk-5.4.1-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 02ea494697003941445d782d0f94b2d4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gawk@5.4.1-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gcc-plugin-annobin-aarch64", "name": "gcc-plugin-annobin", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gcc-plugin-annobin-16.2.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 856d8e3f146702081b65317a6da18f90"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gcc-plugin-annobin@16.2.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gcc-aarch64", "name": "gcc", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gcc-16.2.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 555fbdebe005a6003d740878539d2db4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gcc@16.2.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gdb-minimal-aarch64", "name": "gdb-minimal", "versionInfo": "17.2-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gdb-minimal-17.2-6.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND BSD-3-Clause AND FSFAP AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain AND GFDL-1.3-or-later AND LGPL-2.0-or-later WITH GCC-exception-2.0 AND GPL-3.0-or-later WITH GCC-exception-3.1 AND GPL-2.0-or-later WITH GNU-compiler-exception AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 8b52c99ad39fb4b6c9bc68140320c43f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gdb-minimal@17.2-6.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gdbm-libs-aarch64", "name": "gdbm-libs", "versionInfo": "1:1.26-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gdbm-libs-1.26-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: f121be53d17f9bbca1ca50a948d12be1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gdbm-libs@1.26-1.1.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ghc-srpm-macros-aarch64", "name": "ghc-srpm-macros", "versionInfo": "1.10-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/ghc-srpm-macros-1.10-2.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: c59363c566e4f370953f5f4b048e594e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ghc-srpm-macros@1.10-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-git-core-aarch64", "name": "git-core", "versionInfo": "2.56.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/git-core-2.56.0-1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-only AND GPL-2.0-or-later AND LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 0fd2828e8896bbb8a667e3609dd85047"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/git-core@2.56.0-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glib2-devel-aarch64", "name": "glib2-devel", "versionInfo": "2.90.1-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/glib2-devel-2.90.1-1.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: d838287ad9115b3260cb82d591f27543"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glib2-devel@2.90.1-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glib2-aarch64", "name": "glib2", "versionInfo": "2.90.1-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/glib2-2.90.1-1.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: ac2d8f1665c35964f7672c28b836a4e2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glib2@2.90.1-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-common-aarch64", "name": "glibc-common", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/glibc-common-2.43-9.2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: f9a198e72a2894ed9ec88a654adf99b1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-common@2.43-9.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-devel-aarch64", "name": "glibc-devel", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/glibc-devel-2.43-9.2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: e42112d33f8547a881c1bb9ffdc1a6e3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-devel@2.43-9.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-gconv-extra-aarch64", "name": "glibc-gconv-extra", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/glibc-gconv-extra-2.43-9.2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: ae1cf12211d528ac9ae11fb34b1bb66b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-gconv-extra@2.43-9.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-minimal-langpack-aarch64", "name": "glibc-minimal-langpack", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/glibc-minimal-langpack-2.43-9.2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 0039d68e01dc9ac5d477a98ecdf2918e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-minimal-langpack@2.43-9.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-static-aarch64", "name": "glibc-static", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/glibc-static-2.43-9.2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 58b95b805db1d882d654b2dc5cc7b68f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-static@2.43-9.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-aarch64", "name": "glibc", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/glibc-2.43-9.2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: e5a77566fe809a0ac7c2a5a2ec623de6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc@2.43-9.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gmp-aarch64", "name": "gmp", "versionInfo": "1:6.3.0-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gmp-6.3.0-6.1.hum1.aarch64.rpm", "licenseDeclared": "(LGPL-3.0-or-later OR GPL-2.0-or-later OR (LGPL-3.0-or-later AND GPL-2.0-or-later)) AND GFDL-1.3-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 166ae71bf4af463dff3d7c6f5023d699"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gmp@6.3.0-6.1.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnat-srpm-macros-aarch64", "name": "gnat-srpm-macros", "versionInfo": "7-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnat-srpm-macros-7-3.hum1.noarch.rpm", "licenseDeclared": "FSFAP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 66efb6ab04e5e1a84478a688e2f149a3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnat-srpm-macros@7-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnome-srpm-macros-aarch64", "name": "gnome-srpm-macros", "versionInfo": "1.0-1.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/updates/44/Everything/aarch64/Packages/g/gnome-srpm-macros-1.0-1.fc44.noarch.rpm", "licenseDeclared": "Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 2bbaa6afcb861d76b0036e4b5bf9b3be"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnome-srpm-macros@1.0-1.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnulib-l10n-aarch64", "name": "gnulib-l10n", "versionInfo": "20241231-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnulib-l10n-20241231-4.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 5628836ab4d4e824bcadb20d87a01a33"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnulib-l10n@20241231-4.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-dirmngr-aarch64", "name": "gnupg2-dirmngr", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnupg2-dirmngr-2.4.9-18.2.hum1.aarch64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 573b7679ab4b9d60430280a4118102c2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-dirmngr@2.4.9-18.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-gpg-agent-aarch64", "name": "gnupg2-gpg-agent", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnupg2-gpg-agent-2.4.9-18.2.hum1.aarch64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: ade2846c6a8b7bb8e8c3b0c63fb67f7f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-gpg-agent@2.4.9-18.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-gpgconf-aarch64", "name": "gnupg2-gpgconf", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnupg2-gpgconf-2.4.9-18.2.hum1.aarch64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: da48ec10f5d1daccbd975810b0b9c100"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-gpgconf@2.4.9-18.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-keyboxd-aarch64", "name": "gnupg2-keyboxd", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnupg2-keyboxd-2.4.9-18.2.hum1.aarch64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: e12f0d3a0a12adafdb2f9c93d96e60f5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-keyboxd@2.4.9-18.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-verify-aarch64", "name": "gnupg2-verify", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnupg2-verify-2.4.9-18.2.hum1.aarch64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 43419a3185e8322daad33b555b420bb8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-verify@2.4.9-18.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-aarch64", "name": "gnupg2", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnupg2-2.4.9-18.2.hum1.aarch64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: a5c1a31bb640a3b81e5b4c72524d1445"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2@2.4.9-18.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnutls-aarch64", "name": "gnutls", "versionInfo": "3.8.13-5.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnutls-3.8.13-5.2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 191df5a76f2ce6a009e3153d099cbcff"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnutls@3.8.13-5.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-filesystem-aarch64", "name": "go-filesystem", "versionInfo": "3.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/go-filesystem-3.8.0-3.hum1.aarch64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 21c344b50ec791073eecf2f78130e36d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-filesystem@3.8.0-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-rpm-macros-aarch64", "name": "go-rpm-macros", "versionInfo": "3.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/go-rpm-macros-3.8.0-3.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 1cca57be53ff370d84ba6f32712ca1e2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-rpm-macros@3.8.0-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-srpm-macros-aarch64", "name": "go-srpm-macros", "versionInfo": "3.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/go-srpm-macros-3.8.0-3.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 58fd7d8eb056ce7d09e3ba375de1effc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-srpm-macros@3.8.0-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-bin-aarch64", "name": "golang1.27-bin", "versionInfo": "1.27.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/golang1.27-bin-1.27.2-1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: ca801334afe32839aee19b91c43532dc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27-bin@1.27.2-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-src-aarch64", "name": "golang1.27-src", "versionInfo": "1.27.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/golang1.27-src-1.27.2-1.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: f40c9e87cab011209fed012b75f85d64"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27-src@1.27.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-aarch64", "name": "golang1.27", "versionInfo": "1.27.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/golang1.27-1.27.2-1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: ee42ca71c1f43b31272dfa52dfa74d7a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27@1.27.2-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golist-aarch64", "name": "golist", "versionInfo": "0.11.0-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/golist-0.11.0-2.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause AND BSD-3-Clause AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: b92a6bbb82038b2e3078acfb1c3f4220"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golist@0.11.0-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gpgme-devel-aarch64", "name": "gpgme-devel", "versionInfo": "2.0.1-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gpgme-devel-2.0.1-6.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: f4c852b5c9be5f5d441b756dd183fd25"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gpgme-devel@2.0.1-6.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gpgme-aarch64", "name": "gpgme", "versionInfo": "2.0.1-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gpgme-2.0.1-6.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: e6b0384661c64e39e2d62505e00c2c51"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gpgme@2.0.1-6.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gpgverify-aarch64", "name": "gpgverify", "versionInfo": "2.2-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gpgverify-2.2-5.hum1.noarch.rpm", "licenseDeclared": "Boehm-GC", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 9637bdca60814388d4c5b144d923e6d4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gpgverify@2.2-5.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-grep-aarch64", "name": "grep", "versionInfo": "3.12-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/grep-3.12-4.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 3f1164dfa8f8a8505d9e42cd93ae92b5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/grep@3.12-4.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gzip-aarch64", "name": "gzip", "versionInfo": "1.15-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gzip-1.15-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 1ab7c6152e06a467fc96821375eb1ed0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gzip@1.15-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-gpg-keys-aarch64", "name": "hummingbird-gpg-keys", "versionInfo": "20251124-1.17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/h/hummingbird-gpg-keys-20251124-1.17.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 01a73721cc0ecdcb5d9f3929f6777157"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-gpg-keys@20251124-1.17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-release-aarch64", "name": "hummingbird-release", "versionInfo": "20251124-1.17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/h/hummingbird-release-20251124-1.17.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: d1c993eba75002797ea72c3cd1266853"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-release@20251124-1.17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-repos-aarch64", "name": "hummingbird-repos", "versionInfo": "20251124-1.17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/h/hummingbird-repos-20251124-1.17.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 1704eb0434ddab68e1c756070246f576"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-repos@20251124-1.17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ima-evm-utils-libs-aarch64", "name": "ima-evm-utils-libs", "versionInfo": "1.6.2-12.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/i/ima-evm-utils-libs-1.6.2-12.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: a96435ab801796679b678799c4768d2e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ima-evm-utils-libs@1.6.2-12.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-info-aarch64", "name": "info", "versionInfo": "7.2-9.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/aarch64/os/Packages/i/info-7.2-9.fc44.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: ff57ae9e674b526c3d40eebc6a75d7f1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/info@7.2-9.fc44?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-jansson-aarch64", "name": "jansson", "versionInfo": "2.14-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/j/jansson-2.14-5.1.hum1.aarch64.rpm", "licenseDeclared": "MIT AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: bf335621846a7b5ac53ffbc9a26e1326"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/jansson@2.14-5.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-java-srpm-macros-aarch64", "name": "java-srpm-macros", "versionInfo": "1-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/j/java-srpm-macros-1-9.hum1.noarch.rpm", "licenseDeclared": "MIT-0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 367fafb59cbd6a02034ba8bafdafe9c9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/java-srpm-macros@1-9.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-json-c-aarch64", "name": "json-c", "versionInfo": "0.18-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/j/json-c-0.18-9.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 35d1a4b8eecbbf9528f613f719cf4993"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/json-c@0.18-9.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-kernel-headers-aarch64", "name": "kernel-headers", "versionInfo": "7.2.0-61.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/k/kernel-headers-7.2.0-61.1.hum1.aarch64.rpm", "licenseDeclared": "((GPL-2.0-only WITH Linux-syscall-note) OR BSD-2-Clause) AND ((GPL-2.0-only WITH Linux-syscall-note) OR BSD-3-Clause) AND ((GPL-2.0-only WITH Linux-syscall-note) OR CDDL-1.0) AND ((GPL-2.0-only WITH Linux-syscall-note) OR Linux-OpenIB) AND ((GPL-2.0-only WITH Linux-syscall-note) OR MIT) AND ((GPL-2.0-or-later WITH Linux-syscall-note) OR BSD-3-Clause) AND ((GPL-2.0-or-later WITH Linux-syscall-note) OR MIT) AND BSD-3-Clause AND (GPL-1.0-or-later WITH Linux-syscall-note) AND GPL-2.0-only AND (GPL-2.0-only WITH Linux-syscall-note) AND (GPL-2.0-or-later WITH Linux-syscall-note) AND (LGPL-2.0-or-later WITH Linux-syscall-note) AND (LGPL-2.1-only WITH Linux-syscall-note) AND (LGPL-2.1-or-later WITH Linux-syscall-note) AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: f889dccce5f81f4149c72806e43c1190"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/kernel-headers@7.2.0-61.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-kernel-srpm-macros-aarch64", "name": "kernel-srpm-macros", "versionInfo": "1.0-30.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/k/kernel-srpm-macros-1.0-30.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: d6fe851b8eed59b0b3ed90411974a3f1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/kernel-srpm-macros@1.0-30.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-keyutils-libs-aarch64", "name": "keyutils-libs", "versionInfo": "1.6.3-8.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/k/keyutils-libs-1.6.3-8.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: d3b7e7b1223be819aef95669d2c4fe0e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/keyutils-libs@1.6.3-8.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-krb5-libs-aarch64", "name": "krb5-libs", "versionInfo": "1.22.2-10.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/k/krb5-libs-1.22.2-10.3.hum1.aarch64.rpm", "licenseDeclared": "Brian-Gladman-2-Clause AND BSD-2-Clause AND (BSD-2-Clause OR GPL-2.0-or-later) AND BSD-2-Clause-first-lines AND BSD-3-Clause AND BSD-4-Clause AND CMU-Mach-nodoc AND FSFULLRWD AND HPND AND HPND-export2-US AND HPND-export-US AND HPND-export-US-acknowledgement AND HPND-export-US-modify AND ISC AND MIT AND MIT-CMU AND OLDAP-2.8 AND OpenVision", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 1ca5cfa7ebc428c140efce4d74804015"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/krb5-libs@1.22.2-10.3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-less-aarch64", "name": "less", "versionInfo": "710-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/less-710-1.1.hum1.aarch64.rpm", "licenseDeclared": "(GPL-3.0-only OR BSD-2-Clause) AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 3862165a10b42fd94768ddf3d4764411"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/less@710-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libacl-aarch64", "name": "libacl", "versionInfo": "2.4.0-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libacl-2.4.0-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 9a7c25684f484750003d22bfc95ac6e6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libacl@2.4.0-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libarchive-aarch64", "name": "libarchive", "versionInfo": "3.8.9-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libarchive-3.8.9-2.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause AND FSFULLR AND GPL-2.0-or-later WITH Libtool-exception AND BSD-3-Clause AND FSFUL", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: c0ad6886a62c6973197b2228b23ec20f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libarchive@3.8.9-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libasan-aarch64", "name": "libasan", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libasan-16.2.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 25182d3ba6ea7a6d2272732b63410bb0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libasan@16.2.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libassuan-devel-aarch64", "name": "libassuan-devel", "versionInfo": "2.5.7-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libassuan-devel-2.5.7-6.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 221f3a7b9804c662965486d781b6f484"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libassuan-devel@2.5.7-6.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libassuan-aarch64", "name": "libassuan", "versionInfo": "2.5.7-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libassuan-2.5.7-6.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: e4bd09b483f2710e919e8b121b8def5b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libassuan@2.5.7-6.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libatomic-aarch64", "name": "libatomic", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libatomic-16.2.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: b96959aff3608e7749fb10e2d07550a2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libatomic@16.2.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libattr-aarch64", "name": "libattr", "versionInfo": "2.6.0-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libattr-2.6.0-9.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: d1a9e2272f66b2470ddf103dccdbaa58"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libattr@2.6.0-9.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libblkid-devel-aarch64", "name": "libblkid-devel", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libblkid-devel-2.42.4-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 4dccb3ff73bf28d632db280b0852d444"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libblkid-devel@2.42.4-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libblkid-aarch64", "name": "libblkid", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libblkid-2.42.4-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 5c7b723d8212d39d56c0d0acb9080c1b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libblkid@2.42.4-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libbrotli-aarch64", "name": "libbrotli", "versionInfo": "1.2.0-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libbrotli-1.2.0-6.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 869ed8881342af797e348cfbd48977db"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libbrotli@1.2.0-6.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libbtrfsutil-aarch64", "name": "libbtrfsutil", "versionInfo": "7.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libbtrfsutil-7.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: b931f5e209dd5c069a0e025b2e2209a0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libbtrfsutil@7.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libbtrfs-aarch64", "name": "libbtrfs", "versionInfo": "7.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libbtrfs-7.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 55bf73164913bcd3c52f82ffc9d8eb22"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libbtrfs@7.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcap-ng-aarch64", "name": "libcap-ng", "versionInfo": "0.9.6-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libcap-ng-0.9.6-1.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 9d383300e9cc456fd95f72ae9b417c32"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcap-ng@0.9.6-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcap-aarch64", "name": "libcap", "versionInfo": "2.78-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libcap-2.78-2.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: e99edee512a85f0da32dac44637395a0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcap@2.78-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcbor-aarch64", "name": "libcbor", "versionInfo": "0.14.0-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libcbor-0.14.0-3.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: fa0be1d01e63778fbf1a7b130aecea58"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcbor@0.14.0-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcom-err-aarch64", "name": "libcom_err", "versionInfo": "1.47.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libcom_err-1.47.4-2.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: de7ad9514f9df324f82aa913badb893a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcom_err@1.47.4-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcurl-aarch64", "name": "libcurl", "versionInfo": "8.22.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libcurl-8.22.0-1.1.hum1.aarch64.rpm", "licenseDeclared": "curl", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: e29d913a076a037c83164d4cc34c9448"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcurl@8.22.0-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libeconf-aarch64", "name": "libeconf", "versionInfo": "0.7.9-4.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libeconf-0.7.9-4.2.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 415ebd06ff218a7848731dd8a12df71d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libeconf@0.7.9-4.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libedit-aarch64", "name": "libedit", "versionInfo": "3.1-60.20260512cvs.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libedit-3.1-60.20260512cvs.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND BSD-2-Clause AND ISC", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: c0b5c990dacb6c4241c49c0d83b2277b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libedit@3.1-60.20260512cvs.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libevent-aarch64", "name": "libevent", "versionInfo": "2.1.13-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libevent-2.1.13-1.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND ISC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: e8b87c1794d95583f6cc214eb663e885"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libevent@2.1.13-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfdisk-aarch64", "name": "libfdisk", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libfdisk-2.42.4-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 5fd6813b6601248c9ee9a9b1756e4aa1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfdisk@2.42.4-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libffi-devel-aarch64", "name": "libffi-devel", "versionInfo": "3.8.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libffi-devel-3.8.0-1.1.hum1.aarch64.rpm", "licenseDeclared": "MIT AND CC-PDDC AND (GPL-3.0-or-later WITH Texinfo-exception)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: aed0a861ef682cfbc6f142c7ffc16dbe"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libffi-devel@3.8.0-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libffi-aarch64", "name": "libffi", "versionInfo": "3.8.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libffi-3.8.0-1.1.hum1.aarch64.rpm", "licenseDeclared": "MIT AND CC-PDDC AND (GPL-3.0-or-later WITH Texinfo-exception)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: dc83882a4ffb09b4e5578776aa34fafa"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libffi@3.8.0-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfido2-aarch64", "name": "libfido2", "versionInfo": "1.17.0-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libfido2-1.17.0-6.2.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 40ab484ed83832f7ef24688549227664"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfido2@1.17.0-6.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfsverity-aarch64", "name": "libfsverity", "versionInfo": "1.7-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libfsverity-1.7-4.1.hum1.aarch64.rpm", "licenseDeclared": "NOASSERTION", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 08e4f68c1432f65fac30bcd58c12091e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfsverity@1.7-4.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgcc-aarch64", "name": "libgcc", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libgcc-16.2.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 67a485baa0d3fb4c0e71f3ba1df5f902"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgcc@16.2.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgcrypt-aarch64", "name": "libgcrypt", "versionInfo": "1.12.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libgcrypt-1.12.4-1.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND (BSD-3-Clause OR GPL-2.0-only) AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later AND MIT-Modern-Variant", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: c5c2ac6cdd2c137b49767a001717c89d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgcrypt@1.12.4-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgomp-aarch64", "name": "libgomp", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libgomp-16.2.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 014e8fb82e2268ed7b74f11ce5a8b4eb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgomp@16.2.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgpg-error-devel-aarch64", "name": "libgpg-error-devel", "versionInfo": "1.61-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libgpg-error-devel-1.61-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND (BSD-3-Clause OR LGPL-2.1-or-later) AND FSFULLR AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: c2508b6ea2f4e474654940a72cde23da"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgpg-error-devel@1.61-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgpg-error-aarch64", "name": "libgpg-error", "versionInfo": "1.61-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libgpg-error-1.61-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND (BSD-3-Clause OR LGPL-2.1-or-later) AND FSFULLR AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 204ebeaf74957a27cc2b160a94f0c79e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgpg-error@1.61-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libidn2-aarch64", "name": "libidn2", "versionInfo": "2.3.8-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libidn2-2.3.8-4.1.hum1.aarch64.rpm", "licenseDeclared": "(GPL-2.0-or-later OR LGPL-3.0-or-later) AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 376a3c90f89b82a907277d1af37c65cd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libidn2@2.3.8-4.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libksba-aarch64", "name": "libksba", "versionInfo": "1.8.1-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libksba-1.8.1-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND (LGPL-3.0-or-later OR GPL-2.0-or-later)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: d6a0dcf217b4639e44ee3774153fe5aa"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libksba@1.8.1-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-liblastlog2-aarch64", "name": "liblastlog2", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/liblastlog2-2.42.4-2.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: a7d655451f4570e65aa8f53042f5ecbb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/liblastlog2@2.42.4-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libmount-devel-aarch64", "name": "libmount-devel", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libmount-devel-2.42.4-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: eb3007f6bb1a29bc64574f08662e4c7b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libmount-devel@2.42.4-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libmount-aarch64", "name": "libmount", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libmount-2.42.4-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 28a418811acfed0034210aa6794e4742"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libmount@2.42.4-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libmpc-aarch64", "name": "libmpc", "versionInfo": "1.4.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libmpc-1.4.1-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-3.0-or-later AND FSFAP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 0153c23cb56f963b856d77e6606b46a4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libmpc@1.4.1-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnghttp2-aarch64", "name": "libnghttp2", "versionInfo": "1.69.0-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libnghttp2-1.69.0-6.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: b2b0fab8908bbedc877ac938800f0385"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnghttp2@1.69.0-6.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnghttp3-aarch64", "name": "libnghttp3", "versionInfo": "1.18.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libnghttp3-1.18.0-1.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 731f3357d94b41124af945cecea7639e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnghttp3@1.18.0-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnsl2-aarch64", "name": "libnsl2", "versionInfo": "2.0.1-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libnsl2-2.0.1-6.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: cb711022bef704f90ab688575af0d004"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnsl2@2.0.1-6.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpfm-aarch64", "name": "libpfm", "versionInfo": "4.13.0-20.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/updates/44/Everything/aarch64/Packages/l/libpfm-4.13.0-20.fc44.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: f67c59ebdcc2d13a01308d6b1d6e536c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpfm@4.13.0-20.fc44?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpkgconf-aarch64", "name": "libpkgconf", "versionInfo": "2.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libpkgconf-2.5.1-2.1.hum1.aarch64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 6a472459f25a886e09b755fd94506315"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpkgconf@2.5.1-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpsl-aarch64", "name": "libpsl", "versionInfo": "0.23.3-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libpsl-0.23.3-1.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: cafec3bb2c0a8c9008983d6ae8495d1e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpsl@0.23.3-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpwquality-aarch64", "name": "libpwquality", "versionInfo": "1.4.5-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libpwquality-1.4.5-18.2.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: ee4ca9a711e96038b45d9cbd928763b6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpwquality@1.4.5-18.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libseccomp-devel-aarch64", "name": "libseccomp-devel", "versionInfo": "2.6.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libseccomp-devel-2.6.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: b1cf8718f12b28db665c6ecf3fd8d92f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libseccomp-devel@2.6.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libseccomp-static-aarch64", "name": "libseccomp-static", "versionInfo": "2.6.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libseccomp-static-2.6.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 2ed2338c21e62fd6b9dc4e36df1e319e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libseccomp-static@2.6.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libseccomp-aarch64", "name": "libseccomp", "versionInfo": "2.6.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libseccomp-2.6.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 91feeca44e36aabdfd0733257c79fd95"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libseccomp@2.6.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libselinux-devel-aarch64", "name": "libselinux-devel", "versionInfo": "3.11-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libselinux-devel-3.11-5.1.hum1.aarch64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: a2db3a9d65cf7c373b58f31caacf2c0c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libselinux-devel@3.11-5.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libselinux-utils-aarch64", "name": "libselinux-utils", "versionInfo": "3.11-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libselinux-utils-3.11-5.1.hum1.aarch64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: a086b73677bd9517a3b039ac5a432040"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libselinux-utils@3.11-5.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libselinux-aarch64", "name": "libselinux", "versionInfo": "3.11-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libselinux-3.11-5.1.hum1.aarch64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 25520cb28213914e5586621a3e2d314b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libselinux@3.11-5.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsemanage-aarch64", "name": "libsemanage", "versionInfo": "3.11-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libsemanage-3.11-4.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 09bc146f89eb39e1d401f83431ccccea"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsemanage@3.11-4.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsepol-devel-aarch64", "name": "libsepol-devel", "versionInfo": "3.11-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libsepol-devel-3.11-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 1572c6d10013efa9b0c29a7a7c308ca6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsepol-devel@3.11-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsepol-aarch64", "name": "libsepol", "versionInfo": "3.11-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libsepol-3.11-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 2cc6e52cce99fa8840bd0465e75a025c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsepol@3.11-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsmartcols-aarch64", "name": "libsmartcols", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libsmartcols-2.42.4-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 2d04c60be141e0254792ddf85c0e0cc0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsmartcols@2.42.4-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libssh-config-aarch64", "name": "libssh-config", "versionInfo": "0.12.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libssh-config-0.12.2-1.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: f26ba5abb68d2fea08f751a8569faa35"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libssh-config@0.12.2-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libssh-aarch64", "name": "libssh", "versionInfo": "0.12.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libssh-0.12.2-1.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 08f9742c96d29f39defcebf4fd74b197"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libssh@0.12.2-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libstdc++-aarch64", "name": "libstdc++", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libstdc++-16.2.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: e725710c3409d1d4619730547f7449f8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libstdc++@16.2.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtasn1-aarch64", "name": "libtasn1", "versionInfo": "4.21.0-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libtasn1-4.21.0-2.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 14c7c1c97721bac561b7d5f8b5c0c39b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtasn1@4.21.0-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtirpc-aarch64", "name": "libtirpc", "versionInfo": "1.3.8-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libtirpc-1.3.8-0.1.hum1.aarch64.rpm", "licenseDeclared": "SISSL AND BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 66be888f56ad78c0a3d3e13b771e699a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtirpc@1.3.8-0.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtool-ltdl-aarch64", "name": "libtool-ltdl", "versionInfo": "2.6.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libtool-ltdl-2.6.2-1.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.0-or-later WITH Libtool-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 9809b30f9c49849338a2498623dfb852"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtool-ltdl@2.6.2-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libubsan-aarch64", "name": "libubsan", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libubsan-16.2.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 5a41a411d481c8f52c4f75276408738e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libubsan@16.2.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libunistring-aarch64", "name": "libunistring", "versionInfo": "1.1-12.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libunistring-1.1-12.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: bf45761accca21784ca1db3f147e5757"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libunistring@1.1-12.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libusb1-aarch64", "name": "libusb1", "versionInfo": "1.0.30-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libusb1-1.0.30-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 85c533d18faa83223f25c27c52a93f10"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libusb1@1.0.30-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libuuid-aarch64", "name": "libuuid", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libuuid-2.42.4-2.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: aefcbbc685252be8d35e820024dcce0b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libuuid@2.42.4-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libverto-aarch64", "name": "libverto", "versionInfo": "0.3.2-13.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libverto-0.3.2-13.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 70ecf5a6823c71930b20e277c56238db"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libverto@0.3.2-13.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxcrypt-devel-aarch64", "name": "libxcrypt-devel", "versionInfo": "4.5.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libxcrypt-devel-4.5.2-4.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND BSD-3-Clause AND BSD-2-Clause AND BSD-2-Clause-FreeBSD AND 0BSD AND CC0-1.0 AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 59b03056a000c26fb4c849049d75b60f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxcrypt-devel@4.5.2-4.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxcrypt-static-aarch64", "name": "libxcrypt-static", "versionInfo": "4.5.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libxcrypt-static-4.5.2-4.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND BSD-3-Clause AND BSD-2-Clause AND BSD-2-Clause-FreeBSD AND 0BSD AND CC0-1.0 AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 57b65d84750ddd783500657a60cf4c3b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxcrypt-static@4.5.2-4.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxcrypt-aarch64", "name": "libxcrypt", "versionInfo": "4.5.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libxcrypt-4.5.2-4.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND BSD-3-Clause AND BSD-2-Clause AND BSD-2-Clause-FreeBSD AND 0BSD AND CC0-1.0 AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: db80a9643632ced837bc9a2cbaec27f3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxcrypt@4.5.2-4.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxml2-16-aarch64", "name": "libxml2-16", "versionInfo": "2.15.4-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libxml2-16-2.15.4-1.2.hum1.aarch64.rpm", "licenseDeclared": "MIT AND ISC-Veillard AND W3C", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 42dfa79f0ef5d6069cddea1de7c03068"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxml2-16@2.15.4-1.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libzstd-aarch64", "name": "libzstd", "versionInfo": "1.5.7-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libzstd-1.5.7-6.2.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: b8aaeb5f120147f9830dc5f9d40bef28"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libzstd@1.5.7-6.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-linkdupes-aarch64", "name": "linkdupes", "versionInfo": "0.7.3-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/linkdupes-0.7.3-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND MIT AND Unicode-DFS-2016 AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND (MIT OR Zlib OR Apache-2.0) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 0f212d529c254829bbfdc3493bc10f32"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/linkdupes@0.7.3-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lua-libs-aarch64", "name": "lua-libs", "versionInfo": "5.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/lua-libs-5.5.1-2.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 29a8431add425bb28338079ae0399718"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lua-libs@5.5.1-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lua-srpm-macros-aarch64", "name": "lua-srpm-macros", "versionInfo": "1-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/lua-srpm-macros-1-18.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 68293f00751e1bc423b0bb2ac4e21221"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lua-srpm-macros@1-18.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lz4-libs-aarch64", "name": "lz4-libs", "versionInfo": "1.10.0-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/lz4-libs-1.10.0-5.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: ccee7d664e4a84d6aa511e3a26f93f9f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lz4-libs@1.10.0-5.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lzo-aarch64", "name": "lzo", "versionInfo": "2.10-17.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/lzo-2.10-17.1.hum1.aarch64.rpm", "licenseDeclared": "gpl-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: b22b4c8f86acfd687884ae0ba2a7324a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lzo@2.10-17.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-make-aarch64", "name": "make", "versionInfo": "1:4.4.1-13.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/m/make-4.4.1-13.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND GFDL-1.3-or-later AND FSFULLR", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 5da3e1b32d2cebd830a2448f0f940ff3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/make@4.4.1-13.1.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-meson-srpm-macros-aarch64", "name": "meson-srpm-macros", "versionInfo": "1.12.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/m/meson-srpm-macros-1.12.1-2.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 7617c98560a327b943961c400248f04b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/meson-srpm-macros@1.12.1-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-mpdecimal-aarch64", "name": "mpdecimal", "versionInfo": "4.0.1-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/m/mpdecimal-4.0.1-4.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 36ba815791916cccfd7c0d0c17792adc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/mpdecimal@4.0.1-4.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-mpfr-aarch64", "name": "mpfr", "versionInfo": "4.2.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/m/mpfr-4.2.2-4.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 0702e996cddee9453e51791dfdeb33df"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/mpfr@4.2.2-4.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ncurses-base-aarch64", "name": "ncurses-base", "versionInfo": "6.6-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/n/ncurses-base-6.6-3.1.hum1.noarch.rpm", "licenseDeclared": "MIT-open-group", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: a90d36a4f9603dffe4896cbc1c4c42c0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ncurses-base@6.6-3.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ncurses-libs-aarch64", "name": "ncurses-libs", "versionInfo": "6.6-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/n/ncurses-libs-6.6-3.1.hum1.aarch64.rpm", "licenseDeclared": "MIT-open-group", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: fa3c5788474bd14c1980e9f334fd1b6c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ncurses-libs@6.6-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-nettle-aarch64", "name": "nettle", "versionInfo": "4.0-5.5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/n/nettle-4.0-5.5.hum1.aarch64.rpm", "licenseDeclared": "LGPL-3.0-or-later OR GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 8485733d8b83283c746c07ccb4cd3fce"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/nettle@4.0-5.5.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ngtcp2-crypto-ossl-aarch64", "name": "ngtcp2-crypto-ossl", "versionInfo": "1.22.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/n/ngtcp2-crypto-ossl-1.22.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 7a6ca0d297c88673e5f88c76f501f7fc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ngtcp2-crypto-ossl@1.22.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ngtcp2-aarch64", "name": "ngtcp2", "versionInfo": "1.22.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/n/ngtcp2-1.22.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: e6d8cfb25c0e2eb0ec02bfa93b7c67fe"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ngtcp2@1.22.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-npth-aarch64", "name": "npth", "versionInfo": "1.8-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/n/npth-1.8-5.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 9df021e664b3a2a9bd92cfbb1b829fcf"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/npth@1.8-5.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ocaml-srpm-macros-aarch64", "name": "ocaml-srpm-macros", "versionInfo": "11-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/o/ocaml-srpm-macros-11-4.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 6d563b597c552c5ce842bdd83b6d8dd1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ocaml-srpm-macros@11-4.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openblas-srpm-macros-aarch64", "name": "openblas-srpm-macros", "versionInfo": "2-23.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/o/openblas-srpm-macros-2-23.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: bf3a7ebbd05d3c09e9712e957b99d3b5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openblas-srpm-macros@2-23.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openldap-aarch64", "name": "openldap", "versionInfo": "2.6.15-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/o/openldap-2.6.15-1.1.hum1.aarch64.rpm", "licenseDeclared": "OLDAP-2.8", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 7a0a38a30429c24b8ee796ace3fa72b6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openldap@2.6.15-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssh-clients-aarch64", "name": "openssh-clients", "versionInfo": "10.5p1-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/o/openssh-clients-10.5p1-1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND BSD-2-Clause AND ISC AND SSH-OpenSSH AND ssh-keyscan AND snprintf AND LicenseRef-Fedora-Public-Domain AND X11-distribute-modifications-variant", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 370c6ca0f28c91d4fc70de3b18040a1f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssh-clients@10.5p1-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssh-aarch64", "name": "openssh", "versionInfo": "10.5p1-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/o/openssh-10.5p1-1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND BSD-2-Clause AND ISC AND SSH-OpenSSH AND ssh-keyscan AND snprintf AND LicenseRef-Fedora-Public-Domain AND X11-distribute-modifications-variant", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: f2a44fb7a579b0f960a127954004c033"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssh@10.5p1-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssl-fips-provider-upstream-aarch64", "name": "openssl-fips-provider-upstream", "versionInfo": "1:3.5.9-0.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/o/openssl-fips-provider-upstream-3.5.9-0.3.hum1.aarch64.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 7d58b7603194e834c375f9794fc20ec3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssl-fips-provider-upstream@3.5.9-0.3.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssl-libs-aarch64", "name": "openssl-libs", "versionInfo": "1:3.5.9-0.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/o/openssl-libs-3.5.9-0.3.hum1.aarch64.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 0bf0c50423ec91bf21a25ad8a5ad2344"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssl-libs@3.5.9-0.3.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-p11-kit-trust-aarch64", "name": "p11-kit-trust", "versionInfo": "0.26.5-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/p11-kit-trust-0.26.5-1.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 4cbcde19716630f9edfd16711c3fcf51"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/p11-kit-trust@0.26.5-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-p11-kit-aarch64", "name": "p11-kit", "versionInfo": "0.26.5-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/p11-kit-0.26.5-1.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 5f499f9cb33f1d850fd44ddd83f6fd67"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/p11-kit@0.26.5-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-package-notes-srpm-macros-aarch64", "name": "package-notes-srpm-macros", "versionInfo": "0.20-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/package-notes-srpm-macros-0.20-2.hum1.noarch.rpm", "licenseDeclared": "0BSD", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 4f6f48e6009eb2455ec194f477f9b058"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/package-notes-srpm-macros@0.20-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pam-libs-aarch64", "name": "pam-libs", "versionInfo": "1.7.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pam-libs-1.7.2-4.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 0817accdede3b6812ccb3569a779a6d8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pam-libs@1.7.2-4.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pam-aarch64", "name": "pam", "versionInfo": "1.7.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pam-1.7.2-4.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 5908c5dba86c0a7785b9507717ed8d52"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pam@1.7.2-4.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-patch-aarch64", "name": "patch", "versionInfo": "2.8-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/patch-2.8-6.2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 910596093cdbbae37d1239e3cda57bde"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/patch@2.8-6.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-devel-aarch64", "name": "pcre2-devel", "versionInfo": "10.49-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pcre2-devel-10.49-0.2.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 5a1b5192cf277300fe3c81ab6417750a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2-devel@10.49-0.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-syntax-aarch64", "name": "pcre2-syntax", "versionInfo": "10.49-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pcre2-syntax-10.49-0.2.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 5892ce77122ec3ecfec34fe8679d2737"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2-syntax@10.49-0.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-utf16-aarch64", "name": "pcre2-utf16", "versionInfo": "10.49-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pcre2-utf16-10.49-0.2.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: b459a2d558f1d874c78e0e9ab2fd4072"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2-utf16@10.49-0.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-utf32-aarch64", "name": "pcre2-utf32", "versionInfo": "10.49-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pcre2-utf32-10.49-0.2.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: cb568b40f52517a1b89aa431baa537f7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2-utf32@10.49-0.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-aarch64", "name": "pcre2", "versionInfo": "10.49-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pcre2-10.49-0.2.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 622d6d1f1739dc65c97a7364e8a36f54"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2@10.49-0.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-perl-srpm-macros-aarch64", "name": "perl-srpm-macros", "versionInfo": "1-65.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/perl-srpm-macros-1-65.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 0f8b16c4e63430bcff87cb49fa941740"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/perl-srpm-macros@1-65.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-m4-aarch64", "name": "pkgconf-m4", "versionInfo": "2.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pkgconf-m4-2.5.1-2.1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later WITH Autoconf-exception-generic", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 2ee038a201817d6d825292dc25c6b873"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf-m4@2.5.1-2.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-pkg-config-aarch64", "name": "pkgconf-pkg-config", "versionInfo": "2.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pkgconf-pkg-config-2.5.1-2.1.hum1.aarch64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 194d02d87ca34faf276f41dc542e7cfb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf-pkg-config@2.5.1-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-aarch64", "name": "pkgconf", "versionInfo": "2.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pkgconf-2.5.1-2.1.hum1.aarch64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 390abfa946645d0fa5872ec37b6fff03"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf@2.5.1-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-policycoreutils-aarch64", "name": "policycoreutils", "versionInfo": "3.11-2.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/policycoreutils-3.11-2.3.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: f29476a3edf8d66a1a2681c976ea4306"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/policycoreutils@3.11-2.3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-popt-aarch64", "name": "popt", "versionInfo": "1.19-11.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/popt-1.19-11.2.hum1.aarch64.rpm", "licenseDeclared": "MIT AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: a59267807d08c6f2f57cd3504fe46e1b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/popt@1.19-11.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-publicsuffix-list-dafsa-aarch64", "name": "publicsuffix-list-dafsa", "versionInfo": "20260624-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/publicsuffix-list-dafsa-20260624-2.1.hum1.noarch.rpm", "licenseDeclared": "MPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 258b22e06326223e99678d8138bba57d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/publicsuffix-list-dafsa@20260624-2.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pyproject-srpm-macros-aarch64", "name": "pyproject-srpm-macros", "versionInfo": "1.23.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pyproject-srpm-macros-1.23.2-1.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: e82edc55e5be2f520af44c2b0337e92a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pyproject-srpm-macros@1.23.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python-pip-wheel-aarch64", "name": "python-pip-wheel", "versionInfo": "26.2-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/python-pip-wheel-26.2-0.2.hum1.noarch.rpm", "licenseDeclared": "MIT AND Python-2.0.1 AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MPL-2.0 AND (Apache-2.0 OR BSD-2-Clause)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 30b1136e6baf2dc70c7e01a45cf96050"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python-pip-wheel@26.2-0.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python-srpm-macros-aarch64", "name": "python-srpm-macros", "versionInfo": "3.14-12.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/python-srpm-macros-3.14-12.2.hum1.noarch.rpm", "licenseDeclared": "MIT AND PSF-2.0 AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 618d0c006548a702f22df8ec49dca3a5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python-srpm-macros@3.14-12.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-libs-aarch64", "name": "python3-libs", "versionInfo": "3.14.8-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/python3-libs-3.14.8-1.1.hum1.aarch64.rpm", "licenseDeclared": "Python-2.0.1 AND MIT AND BSD-3-Clause AND MIT-CMU AND HPND-SMC AND BSD-2-Clause AND dtoa AND Unicode-3.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 49ec99ea0399105d541434d8d38f18da"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-libs@3.14.8-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-packaging-aarch64", "name": "python3-packaging", "versionInfo": "26.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/python3-packaging-26.2-4.1.hum1.noarch.rpm", "licenseDeclared": "BSD-2-Clause OR Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: cc27501b93aed57fe401a0e3e4befdf2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-packaging@26.2-4.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-aarch64", "name": "python3", "versionInfo": "3.14.8-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/python3-3.14.8-1.1.hum1.aarch64.rpm", "licenseDeclared": "Python-2.0.1", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 18ffabe8c4f4771f14d1a2dbca1a79fe"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3@3.14.8-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-qt5-srpm-macros-aarch64", "name": "qt5-srpm-macros", "versionInfo": "5.15.18-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/q/qt5-srpm-macros-5.15.18-3.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 4ffb52b3bdf4017e6c58f49b621e1c54"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/qt5-srpm-macros@5.15.18-3.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-qt6-srpm-macros-aarch64", "name": "qt6-srpm-macros", "versionInfo": "6.11.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/q/qt6-srpm-macros-6.11.2-1.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 8478ebf3654d031de2c0964fb1f5d8a2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/qt6-srpm-macros@6.11.2-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-readline-aarch64", "name": "readline", "versionInfo": "8.3-7.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/readline-8.3-7.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 53feb6b9f0049bf2784fa793f91a2910"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/readline@8.3-7.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-redhat-rpm-config-aarch64", "name": "redhat-rpm-config", "versionInfo": "345-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/redhat-rpm-config-345-4.hum1.noarch.rpm", "licenseDeclared": "GPL-1.0-or-later AND GPL-2.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 9e9b9de801d40d8b16d77058da82cde9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/redhat-rpm-config@345-4.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-build-libs-aarch64", "name": "rpm-build-libs", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rpm-build-libs-6.1.0-1.2.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 4262ef24ddbef7bb949209d16e4630d5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-build-libs@6.1.0-1.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-build-aarch64", "name": "rpm-build", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rpm-build-6.1.0-1.2.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 08a854828dea1b4a5738d93cbe23ea7c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-build@6.1.0-1.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-libs-aarch64", "name": "rpm-libs", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rpm-libs-6.1.0-1.2.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: f3a2dbc2d4e31759c79c7d665daa59a5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-libs@6.1.0-1.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-plugin-selinux-aarch64", "name": "rpm-plugin-selinux", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rpm-plugin-selinux-6.1.0-1.2.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 3aa7f0b11ef4d932edf55fa41f2a2b95"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-plugin-selinux@6.1.0-1.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-sequoia-aarch64", "name": "rpm-sequoia", "versionInfo": "1.10.1.1-1.5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rpm-sequoia-1.10.1.1-1.5.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.0-or-later AND Apache-2.0 AND BSL-1.0 AND MIT AND Unicode-DFS-2016 AND (Apache-2.0 OR MIT) AND (MIT OR Apache-2.0 OR Zlib) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 1b48403219c7366b55923e38b4f53df4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-sequoia@1.10.1.1-1.5.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-sign-libs-aarch64", "name": "rpm-sign-libs", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rpm-sign-libs-6.1.0-1.2.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: eb5c1682e184f95275ab6d0859b29798"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-sign-libs@6.1.0-1.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-aarch64", "name": "rpm", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rpm-6.1.0-1.2.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 56834dc918edb7e3620729c2a4b9d7bc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm@6.1.0-1.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rust-srpm-macros-aarch64", "name": "rust-srpm-macros", "versionInfo": "28.5-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rust-srpm-macros-28.5-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 606a7a2166723ba0e3515fa8244596dc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rust-srpm-macros@28.5-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sed-aarch64", "name": "sed", "versionInfo": "4.10-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/sed-4.10-2.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 3d32547783b16324bc14edaa05196fa0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sed@4.10-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-selinux-policy-targeted-aarch64", "name": "selinux-policy-targeted", "versionInfo": "45.21-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/selinux-policy-targeted-45.21-1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: afd3a0e6066718b6633918ff5031c1ce"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/selinux-policy-targeted@45.21-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-selinux-policy-aarch64", "name": "selinux-policy", "versionInfo": "45.21-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/selinux-policy-45.21-1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 910958d9c5c1913d447a1e64fb0ad0b6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/selinux-policy@45.21-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-setup-aarch64", "name": "setup", "versionInfo": "2.15.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/setup-2.15.1-2.1.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 7306efa4649c49f3d249269ae6781e58"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/setup@2.15.1-2.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-shadow-utils-subid-devel-aarch64", "name": "shadow-utils-subid-devel", "versionInfo": "2:4.20.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/shadow-utils-subid-devel-4.20.0-1.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: f2cd7571cd203548460a7d1340e416b5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/shadow-utils-subid-devel@4.20.0-1.1.hum1?arch=aarch64&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-shadow-utils-subid-aarch64", "name": "shadow-utils-subid", "versionInfo": "2:4.20.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/shadow-utils-subid-4.20.0-1.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 894dae1d8625937d9c082c4c21edb5a2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/shadow-utils-subid@4.20.0-1.1.hum1?arch=aarch64&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-shadow-utils-aarch64", "name": "shadow-utils", "versionInfo": "2:4.20.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/shadow-utils-4.20.0-1.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 2e89cf130885f48a35b69f11f4949c38"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/shadow-utils@4.20.0-1.1.hum1?arch=aarch64&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sqlite-devel-aarch64", "name": "sqlite-devel", "versionInfo": "3.54.0-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/sqlite-devel-3.54.0-0.1.hum1.aarch64.rpm", "licenseDeclared": "blessing", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 05f549a3a8e5fe2d09086a13cf625e25"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sqlite-devel@3.54.0-0.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sqlite-libs-aarch64", "name": "sqlite-libs", "versionInfo": "3.54.0-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/sqlite-libs-3.54.0-0.1.hum1.aarch64.rpm", "licenseDeclared": "blessing", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 07e9e3c90b4ca4ef550b8b5b4115e5c0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sqlite-libs@3.54.0-0.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sqlite-aarch64", "name": "sqlite", "versionInfo": "3.54.0-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/sqlite-3.54.0-0.1.hum1.aarch64.rpm", "licenseDeclared": "blessing", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: c77ab31679e8dfd31d018c047a1fa2a5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sqlite@3.54.0-0.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sysprof-capture-devel-aarch64", "name": "sysprof-capture-devel", "versionInfo": "51.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/sysprof-capture-devel-51.0-1.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause-Patent", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 3ee0b6cb6c4cf25db66d269cbc2cfa01"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sysprof-capture-devel@51.0-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-devel-aarch64", "name": "systemd-devel", "versionInfo": "261.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/systemd-devel-261.2-1.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 9fac174be1e4e8023170232ca3cde4c8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-devel@261.2-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-libs-aarch64", "name": "systemd-libs", "versionInfo": "261.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/systemd-libs-261.2-1.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 70d8146669255ba05ce2f1f4569a53ea"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-libs@261.2-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-rpm-macros-aarch64", "name": "systemd-rpm-macros", "versionInfo": "261.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/systemd-rpm-macros-261.2-1.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 52980d5eb7674cf6c5b0730b0095a2a4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-rpm-macros@261.2-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-shared-aarch64", "name": "systemd-shared", "versionInfo": "261.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/systemd-shared-261.2-1.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: beb80751114eafbc8c3a53c03acea55c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-shared@261.2-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-standalone-sysusers-aarch64", "name": "systemd-standalone-sysusers", "versionInfo": "261.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/systemd-standalone-sysusers-261.2-1.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: c1d8fb208e84a77c514da417404b8f0b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-standalone-sysusers@261.2-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-aarch64", "name": "systemd", "versionInfo": "261.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/systemd-261.2-1.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 4841b7b8ccf7ab2049d5da8623a3cbc1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd@261.2-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tar-aarch64", "name": "tar", "versionInfo": "2:1.35-10.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/t/tar-1.35-10.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 4e587755d33c8d0282c9c40fc74c0f79"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tar@1.35-10.1.hum1?arch=aarch64&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tpm2-tss-aarch64", "name": "tpm2-tss", "versionInfo": "4.2.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/t/tpm2-tss-4.2.0-1.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 9ffd7ed639cb171e2130e301bcefd292"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tpm2-tss@4.2.0-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tree-sitter-srpm-macros-aarch64", "name": "tree-sitter-srpm-macros", "versionInfo": "0.4.6-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/t/tree-sitter-srpm-macros-0.4.6-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: f65af17df28df341ec383338fcc47481"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tree-sitter-srpm-macros@0.4.6-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tzdata-aarch64", "name": "tzdata", "versionInfo": "2026e-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/t/tzdata-2026e-1.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain AND (GPL-2.0-only WITH ClassPath-exception-2.0)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: a1336045dee9a14e5ecb98f2e75ca023"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tzdata@2026e-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-unzip-aarch64", "name": "unzip", "versionInfo": "6.0-71.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/u/unzip-6.0-71.1.hum1.aarch64.rpm", "licenseDeclared": "Info-ZIP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 87ad5c5b51db9c1f6fa9c96637ffd252"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/unzip@6.0-71.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-util-linux-core-aarch64", "name": "util-linux-core", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/u/util-linux-core-2.42.4-2.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: fc17431aba800b112050d86c4f27804b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/util-linux-core@2.42.4-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-util-linux-aarch64", "name": "util-linux", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/u/util-linux-2.42.4-2.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-1.0-or-later AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 87a04208a28df627928b6ffdc49da18a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/util-linux@2.42.4-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-which-aarch64", "name": "which", "versionInfo": "2.25-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/w/which-2.25-2.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 3acbde8cc3977af8ce2112397cde2817"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/which@2.25-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xxhash-libs-aarch64", "name": "xxhash-libs", "versionInfo": "0.8.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/x/xxhash-libs-0.8.4-1.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 94a4e68282f894848dfcd600c156394a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xxhash-libs@0.8.4-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xz-libs-aarch64", "name": "xz-libs", "versionInfo": "1:5.8.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/x/xz-libs-5.8.4-1.1.hum1.aarch64.rpm", "licenseDeclared": "0BSD", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 712ddac4015f3e0a52a2b3f765e8e191"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xz-libs@5.8.4-1.1.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xz-aarch64", "name": "xz", "versionInfo": "1:5.8.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/x/xz-5.8.4-1.1.hum1.aarch64.rpm", "licenseDeclared": "0BSD AND GPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: db94e077cd214b5c423f7b4c59622c14"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xz@5.8.4-1.1.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zig-srpm-macros-aarch64", "name": "zig-srpm-macros", "versionInfo": "1-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/z/zig-srpm-macros-1-9.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 0c226eb1fa4d5fc3d272055b6397b077"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zig-srpm-macros@1-9.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zip-aarch64", "name": "zip", "versionInfo": "3.0-46.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/z/zip-3.0-46.1.hum1.aarch64.rpm", "licenseDeclared": "Info-ZIP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 901de5c8acb50bc2000cc1ff85afa11a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zip@3.0-46.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zlib-ng-compat-devel-aarch64", "name": "zlib-ng-compat-devel", "versionInfo": "2.3.3-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/z/zlib-ng-compat-devel-2.3.3-6.1.hum1.aarch64.rpm", "licenseDeclared": "Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: b61c86c0a29da1357e122697eec34420"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zlib-ng-compat-devel@2.3.3-6.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zlib-ng-compat-aarch64", "name": "zlib-ng-compat", "versionInfo": "2.3.3-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/z/zlib-ng-compat-2.3.3-6.1.hum1.aarch64.rpm", "licenseDeclared": "Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 06962c93fec8b49e0c12e23e7154ded4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zlib-ng-compat@2.3.3-6.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zstd-aarch64", "name": "zstd", "versionInfo": "1.5.7-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/z/zstd-1.5.7-6.2.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 0537b67afcf0c266515477de756f6dee"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zstd@1.5.7-6.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-buildah-s390x", "name": "buildah-buildroot-s390x", "versionInfo": "1b5c597e", "downloadLocation": "NOASSERTION", "filesAnalyzed": false}, {"SPDXID": "SPDXRef-Buildroot-Package-R-srpm-macros-s390x", "name": "R-srpm-macros", "versionInfo": "1.3.7-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/r/R-srpm-macros-1.3.7-3.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: af95299e83e51b62a40fa7a42d357077"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/R-srpm-macros@1.3.7-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-add-determinism-s390x", "name": "add-determinism", "versionInfo": "0.7.3-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/a/add-determinism-0.7.3-3.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND MIT AND Unicode-DFS-2016 AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 OR MIT) AND (Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND (MIT OR Zlib OR Apache-2.0) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: ef237928cb1bc6d180183d4f2ea933da"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/add-determinism@0.7.3-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-alternatives-s390x", "name": "alternatives", "versionInfo": "1.33-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/a/alternatives-1.33-6.1.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 8c032a32d77cea45153f36640ad59a1e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/alternatives@1.33-6.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-annobin-docs-s390x", "name": "annobin-docs", "versionInfo": "13.32-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/a/annobin-docs-13.32-1.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND GFDL-1.3-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 18d60a72e7a0be13693c92c6e0d885c9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/annobin-docs@13.32-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-annobin-plugin-gcc-s390x", "name": "annobin-plugin-gcc", "versionInfo": "13.32-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/a/annobin-plugin-gcc-13.32-1.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND GFDL-1.3-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: c2981c7ef3c6275bbfe316b04a4705e3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/annobin-plugin-gcc@13.32-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ansible-srpm-macros-s390x", "name": "ansible-srpm-macros", "versionInfo": "1-22.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/a/ansible-srpm-macros-1-22.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 6343ff368e5236625d015dbc91e70769"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ansible-srpm-macros@1-22.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-audit-libs-s390x", "name": "audit-libs", "versionInfo": "4.2.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/a/audit-libs-4.2.1-2.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: b3d73496d23c446bac22a36930e8bf25"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/audit-libs@4.2.1-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-authselect-libs-s390x", "name": "authselect-libs", "versionInfo": "1.8.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/a/authselect-libs-1.8.0-1.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 89c88fff68b6f0f0919642c5a6ae55eb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/authselect-libs@1.8.0-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-authselect-s390x", "name": "authselect", "versionInfo": "1.8.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/a/authselect-1.8.0-1.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 4800aba3859d59391ed51e6a511c2996"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/authselect@1.8.0-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bash-s390x", "name": "bash", "versionInfo": "5.3.20-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/b/bash-5.3.20-1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: f0cc885ec126817b70443273e779f324"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bash@5.3.20-1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-binutils-s390x", "name": "binutils", "versionInfo": "2.46.1-1.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/b/binutils-2.46.1-1.3.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-3.0-or-later WITH Bison-exception-2.2) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND BSD-3-Clause AND GFDL-1.3-or-later AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 01d2db020c2738eb1fc6d20bb1ac387a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/binutils@2.46.1-1.3.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-btrfs-progs-devel-s390x", "name": "btrfs-progs-devel", "versionInfo": "7.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/b/btrfs-progs-devel-7.1-3.1.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-only and LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 2bdbbdbc837cfc605cb191329bc74cf1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/btrfs-progs-devel@7.1-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-btrfs-progs-s390x", "name": "btrfs-progs", "versionInfo": "7.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/b/btrfs-progs-7.1-3.1.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: d2554d7e5cb31be34500c3772f7f66a6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/btrfs-progs@7.1-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-build-reproducibility-srpm-macros-s390x", "name": "build-reproducibility-srpm-macros", "versionInfo": "0.7.3-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/b/build-reproducibility-srpm-macros-0.7.3-3.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 4dea8bdbe97b4534f60d8a6d0b9c793c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/build-reproducibility-srpm-macros@0.7.3-3.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bzip2-libs-s390x", "name": "bzip2-libs", "versionInfo": "1.0.8-24.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/b/bzip2-libs-1.0.8-24.1.hum1.s390x.rpm", "licenseDeclared": "BSD-4-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: de07601087c4eb722dcb0971aaa6fbea"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bzip2-libs@1.0.8-24.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bzip2-s390x", "name": "bzip2", "versionInfo": "1.0.8-24.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/b/bzip2-1.0.8-24.1.hum1.s390x.rpm", "licenseDeclared": "BSD-4-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: df662eeb30bc1dc3f0647b081dc96498"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bzip2@1.0.8-24.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ca-certificates-s390x", "name": "ca-certificates", "versionInfo": "2026.2.90_v9.0.317-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/c/ca-certificates-2026.2.90_v9.0.317-1.1.hum1.noarch.rpm", "licenseDeclared": "MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: a195cd97c3daf258791a89c2b5af39d2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ca-certificates@2026.2.90_v9.0.317-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cmake-filesystem-s390x", "name": "cmake-filesystem", "versionInfo": "4.3.0-5.6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/c/cmake-filesystem-4.3.0-5.6.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause AND MIT-open-group AND Zlib AND Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 01150fa2877af72adedd3ea1de0ade30"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cmake-filesystem@4.3.0-5.6.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cmake-srpm-macros-s390x", "name": "cmake-srpm-macros", "versionInfo": "4.3.0-5.6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/c/cmake-srpm-macros-4.3.0-5.6.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND MIT-open-group AND Zlib AND Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: e2f14e03350d92477884a522df888c53"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cmake-srpm-macros@4.3.0-5.6.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-coreutils-common-s390x", "name": "coreutils-common", "versionInfo": "9.12-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/c/coreutils-common-9.12-1.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-no-invariants-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: ca1ea021eaf98e265d862c5e006b9b28"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/coreutils-common@9.12-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-coreutils-s390x", "name": "coreutils", "versionInfo": "9.12-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/c/coreutils-9.12-1.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-no-invariants-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 125a9c8661c2a4b1ae3cdca1e9773553"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/coreutils@9.12-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cpio-s390x", "name": "cpio", "versionInfo": "2.15-10.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/c/cpio-2.15-10.2.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 320683292765c2b9e194d914e1467b02"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cpio@2.15-10.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cpp-s390x", "name": "cpp", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/c/cpp-16.2.1-3.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 9ffd80ab81d488b07f159598e610a683"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cpp@16.2.1-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cracklib-s390x", "name": "cracklib", "versionInfo": "2.10.3-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/c/cracklib-2.10.3-2.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: c23234ae30ad014dc3f89259c8f3b4f7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cracklib@2.10.3-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-crypto-policies-config-default-s390x", "name": "crypto-policies-config-default", "versionInfo": "20260708-1.git6ce654c.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/c/crypto-policies-config-default-20260708-1.git6ce654c.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 9a6e4cabd4b56283a4b9979cd5982e03"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/crypto-policies-config-default@20260708-1.git6ce654c.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-crypto-policies-s390x", "name": "crypto-policies", "versionInfo": "20260708-1.git6ce654c.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/c/crypto-policies-20260708-1.git6ce654c.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: e1e4bf45e9857d609baf7ae6e3036a45"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/crypto-policies@20260708-1.git6ce654c.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-curl-s390x", "name": "curl", "versionInfo": "8.22.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/c/curl-8.22.0-1.1.hum1.s390x.rpm", "licenseDeclared": "curl", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 5b4faa6ce7e8c0fcb895a62f9fd50cde"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/curl@8.22.0-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cyrus-sasl-lib-s390x", "name": "cyrus-sasl-lib", "versionInfo": "2.1.28-37.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/c/cyrus-sasl-lib-2.1.28-37.2.hum1.s390x.rpm", "licenseDeclared": "BSD-Attribution-HPND-disclaimer", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: b8c311ffd73582f8a5ee475b0f6a5aad"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cyrus-sasl-lib@2.1.28-37.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-debugedit-s390x", "name": "debugedit", "versionInfo": "5.3-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/d/debugedit-5.3-3.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 7ce0d08f82624617a229c20106310c56"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/debugedit@5.3-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-device-mapper-devel-s390x", "name": "device-mapper-devel", "versionInfo": "1.02.217-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/d/device-mapper-devel-1.02.217-1.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 81d35cf08fdac53c1c393a615628c3c2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/device-mapper-devel@1.02.217-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-device-mapper-libs-s390x", "name": "device-mapper-libs", "versionInfo": "1.02.217-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/d/device-mapper-libs-1.02.217-1.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 9e5607df62b6c2142e422ef721c41e84"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/device-mapper-libs@1.02.217-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-device-mapper-s390x", "name": "device-mapper", "versionInfo": "1.02.217-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/d/device-mapper-1.02.217-1.1.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: c4101c974cecf51699686d84706f7d3d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/device-mapper@1.02.217-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-diffutils-s390x", "name": "diffutils", "versionInfo": "3.12-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/d/diffutils-3.12-6.2.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 833a118082d70b4cc23d82b506975341"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/diffutils@3.12-6.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-dwz-s390x", "name": "dwz", "versionInfo": "0.17-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/d/dwz-0.17-3.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND GPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 39608f83a2b2566a2fd28664b3f167a7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/dwz@0.17-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-e2fsprogs-libs-s390x", "name": "e2fsprogs-libs", "versionInfo": "1.47.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/e/e2fsprogs-libs-1.47.4-2.1.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-only AND LGPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: c8a0c4c294f3bbe593b406f2112a7699"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/e2fsprogs-libs@1.47.4-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ed-s390x", "name": "ed", "versionInfo": "1.22.6-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/e/ed-1.22.6-1.1.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-only AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 9689ad8a7bf1baf643da266932d78301"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ed@1.22.6-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-efi-srpm-macros-s390x", "name": "efi-srpm-macros", "versionInfo": "6-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/e/efi-srpm-macros-6-9.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: cba49c2554beb37df9cc6bb744737e2b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/efi-srpm-macros@6-9.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-debuginfod-client-s390x", "name": "elfutils-debuginfod-client", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/e/elfutils-debuginfod-client-0.196-1.1.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-2.0-or-later OR LGPL-3.0-or-later)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: edf1d7f609d4a899c31d06eaa2536e7d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-debuginfod-client@0.196-1.1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-libelf-s390x", "name": "elfutils-libelf", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/e/elfutils-libelf-0.196-1.1.1.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: c5fd8893c9ef89a8725e9990f060ed3a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-libelf@0.196-1.1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-libs-s390x", "name": "elfutils-libs", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/e/elfutils-libs-0.196-1.1.1.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 4bd7efde617708ec5b2dea0dec41a3d1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-libs@0.196-1.1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-s390x", "name": "elfutils", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/e/elfutils-0.196-1.1.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-2.0-or-later OR LGPL-3.0-or-later) AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: edc55be4985a5706252e40802deeedfb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils@0.196-1.1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-erlang-srpm-macros-s390x", "name": "erlang-srpm-macros", "versionInfo": "0.3.11-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/e/erlang-srpm-macros-0.3.11-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 063020bc2b254fec865c06f313930cec"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/erlang-srpm-macros@0.3.11-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-expat-s390x", "name": "expat", "versionInfo": "2.8.5-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/e/expat-2.8.5-1.2.hum1.s390x.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 059049bbec0de1d63e937fdda5fd572a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/expat@2.8.5-1.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-file-libs-s390x", "name": "file-libs", "versionInfo": "5.48-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/f/file-libs-5.48-3.1.hum1.s390x.rpm", "licenseDeclared": "BSD-2-Clause-Darwin AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 33857bdaf6d7d005ee71155a1a5ca9d2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/file-libs@5.48-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-filesystem-srpm-macros-s390x", "name": "filesystem-srpm-macros", "versionInfo": "3.18-59.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/f/filesystem-srpm-macros-3.18-59.1.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: cff1a42588f4eb1a758735b668069a67"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/filesystem-srpm-macros@3.18-59.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-filesystem-s390x", "name": "filesystem", "versionInfo": "3.18-59.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/f/filesystem-3.18-59.1.hum1.s390x.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: d0b8d5222fccbf85251856cf3dc1f93a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/filesystem@3.18-59.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-file-s390x", "name": "file", "versionInfo": "5.48-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/f/file-5.48-3.1.hum1.s390x.rpm", "licenseDeclared": "BSD-2-Clause-Darwin AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: dccc8e9259bf806446e1dbfac59f5a52"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/file@5.48-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-findutils-s390x", "name": "findutils", "versionInfo": "1:4.11.0-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/f/findutils-4.11.0-2.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 5c745a203687e3ebcfc0a1f170f8a7c3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/findutils@4.11.0-2.1.hum1?arch=s390x&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-fonts-srpm-macros-s390x", "name": "fonts-srpm-macros", "versionInfo": "1:5.0.0-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/f/fonts-srpm-macros-5.0.0-4.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 72e451571f24737949a256d091508d0c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/fonts-srpm-macros@5.0.0-4.hum1?arch=noarch&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-forge-srpm-macros-s390x", "name": "forge-srpm-macros", "versionInfo": "0.4.0-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/f/forge-srpm-macros-0.4.0-5.hum1.noarch.rpm", "licenseDeclared": "GPL-1.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: bfbed65969ec708556df3750591a377d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/forge-srpm-macros@0.4.0-5.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-fpc-srpm-macros-s390x", "name": "fpc-srpm-macros", "versionInfo": "1.3-17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/f/fpc-srpm-macros-1.3-17.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 1f7e4cb902ccc37236f8d34ff8873cf2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/fpc-srpm-macros@1.3-17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gap-srpm-macros-s390x", "name": "gap-srpm-macros", "versionInfo": "2-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gap-srpm-macros-2-3.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 70e3423696085d13791fefc0be7cdf15"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gap-srpm-macros@2-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gawk-s390x", "name": "gawk", "versionInfo": "5.4.1-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gawk-5.4.1-1.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: f62b6f1060564ddadc8a6d8b38bdced1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gawk@5.4.1-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gcc-plugin-annobin-s390x", "name": "gcc-plugin-annobin", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gcc-plugin-annobin-16.2.1-3.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 768767978c834cc04dead07bab328f69"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gcc-plugin-annobin@16.2.1-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gcc-s390x", "name": "gcc", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gcc-16.2.1-3.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: a8f6736c45d3cd00aea31f9f50a44786"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gcc@16.2.1-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gdb-minimal-s390x", "name": "gdb-minimal", "versionInfo": "17.2-4.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora-secondary/updates/44/Everything/s390x/Packages/g/gdb-minimal-17.2-4.fc44.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND BSD-3-Clause AND FSFAP AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain AND GFDL-1.3-or-later AND LGPL-2.0-or-later WITH GCC-exception-2.0 AND GPL-3.0-or-later WITH GCC-exception-3.1 AND GPL-2.0-or-later WITH GNU-compiler-exception AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 705692552ef65f3e1ee98c2d999ec5d3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gdb-minimal@17.2-4.fc44?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gdbm-libs-s390x", "name": "gdbm-libs", "versionInfo": "1:1.26-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gdbm-libs-1.26-1.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 212fc20a38ea2074ee36a62fbf7f2f62"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gdbm-libs@1.26-1.1.hum1?arch=s390x&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ghc-srpm-macros-s390x", "name": "ghc-srpm-macros", "versionInfo": "1.10-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/ghc-srpm-macros-1.10-2.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: c59363c566e4f370953f5f4b048e594e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ghc-srpm-macros@1.10-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-git-core-s390x", "name": "git-core", "versionInfo": "2.56.0-1.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora-secondary/updates/44/Everything/s390x/Packages/g/git-core-2.56.0-1.fc44.s390x.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-only AND GPL-2.0-or-later AND LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: a386965468218acf5e970bcc4de1ee57"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/git-core@2.56.0-1.fc44?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glib2-devel-s390x", "name": "glib2-devel", "versionInfo": "2.90.1-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/glib2-devel-2.90.1-1.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 2f0d541bab7c527684ae3f48ccfa236d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glib2-devel@2.90.1-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glib2-s390x", "name": "glib2", "versionInfo": "2.90.1-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/glib2-2.90.1-1.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: e4245217e8510c5d4d91eab0ddf86bcd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glib2@2.90.1-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-common-s390x", "name": "glibc-common", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/glibc-common-2.43-9.2.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: a8dea3c606ec6891265a77017aece063"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-common@2.43-9.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-devel-s390x", "name": "glibc-devel", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/glibc-devel-2.43-9.2.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 75a543cbb69964f1f02926ccce9fa1cb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-devel@2.43-9.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-gconv-extra-s390x", "name": "glibc-gconv-extra", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/glibc-gconv-extra-2.43-9.2.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 5cbdda59f2c164e806865d4a30e07eab"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-gconv-extra@2.43-9.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-minimal-langpack-s390x", "name": "glibc-minimal-langpack", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/glibc-minimal-langpack-2.43-9.2.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: cc1a51d0faaecc7eac98cdf1ee613134"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-minimal-langpack@2.43-9.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-static-s390x", "name": "glibc-static", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/glibc-static-2.43-9.2.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: b773e4f25abb05cd23a4dfe9c6f9fda9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-static@2.43-9.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-s390x", "name": "glibc", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/glibc-2.43-9.2.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 52dfafc55e889e2d8a2dac9245ab0068"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc@2.43-9.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gmp-s390x", "name": "gmp", "versionInfo": "1:6.3.0-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gmp-6.3.0-6.1.hum1.s390x.rpm", "licenseDeclared": "(LGPL-3.0-or-later OR GPL-2.0-or-later OR (LGPL-3.0-or-later AND GPL-2.0-or-later)) AND GFDL-1.3-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 9e9c7bef27b1f9c662c8064f6fed47c7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gmp@6.3.0-6.1.hum1?arch=s390x&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnat-srpm-macros-s390x", "name": "gnat-srpm-macros", "versionInfo": "7-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gnat-srpm-macros-7-3.hum1.noarch.rpm", "licenseDeclared": "FSFAP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 66efb6ab04e5e1a84478a688e2f149a3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnat-srpm-macros@7-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnome-srpm-macros-s390x", "name": "gnome-srpm-macros", "versionInfo": "1.0-1.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora-secondary/updates/44/Everything/s390x/Packages/g/gnome-srpm-macros-1.0-1.fc44.noarch.rpm", "licenseDeclared": "Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 2bbaa6afcb861d76b0036e4b5bf9b3be"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnome-srpm-macros@1.0-1.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnulib-l10n-s390x", "name": "gnulib-l10n", "versionInfo": "20241231-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gnulib-l10n-20241231-4.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 5628836ab4d4e824bcadb20d87a01a33"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnulib-l10n@20241231-4.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-dirmngr-s390x", "name": "gnupg2-dirmngr", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gnupg2-dirmngr-2.4.9-18.2.hum1.s390x.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: d101e0fe84237b495788851e8eea6236"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-dirmngr@2.4.9-18.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-gpg-agent-s390x", "name": "gnupg2-gpg-agent", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gnupg2-gpg-agent-2.4.9-18.2.hum1.s390x.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: c3d01adde2cdc888413588f5b899e37c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-gpg-agent@2.4.9-18.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-gpgconf-s390x", "name": "gnupg2-gpgconf", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gnupg2-gpgconf-2.4.9-18.2.hum1.s390x.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: a7e2b966cd08292e56bec3ef01b91333"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-gpgconf@2.4.9-18.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-keyboxd-s390x", "name": "gnupg2-keyboxd", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gnupg2-keyboxd-2.4.9-18.2.hum1.s390x.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 39fc1144a8716d29aec25a61af031790"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-keyboxd@2.4.9-18.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-verify-s390x", "name": "gnupg2-verify", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gnupg2-verify-2.4.9-18.2.hum1.s390x.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 55bcec1291392bc641bd9160eafb60ab"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-verify@2.4.9-18.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-s390x", "name": "gnupg2", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gnupg2-2.4.9-18.2.hum1.s390x.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 7fe21b8ec6f4bdbcff1a9f273668375c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2@2.4.9-18.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnutls-s390x", "name": "gnutls", "versionInfo": "3.8.13-5.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gnutls-3.8.13-5.2.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 8df51fe97148aac97285db2527c6b27c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnutls@3.8.13-5.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-filesystem-s390x", "name": "go-filesystem", "versionInfo": "3.8.0-2.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora-secondary/releases/44/Everything/s390x/os/Packages/g/go-filesystem-3.8.0-2.fc44.s390x.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: c0e14cfe7efe84aa2eeadac34b45b086"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-filesystem@3.8.0-2.fc44?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-rpm-macros-s390x", "name": "go-rpm-macros", "versionInfo": "3.8.0-2.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora-secondary/releases/44/Everything/s390x/os/Packages/g/go-rpm-macros-3.8.0-2.fc44.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: c598c878bf7aec955ff55511e766215a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-rpm-macros@3.8.0-2.fc44?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-srpm-macros-s390x", "name": "go-srpm-macros", "versionInfo": "3.8.0-2.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora-secondary/releases/44/Everything/s390x/os/Packages/g/go-srpm-macros-3.8.0-2.fc44.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 6f0b3791a6d27bf3a0297bd5d9133203"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-srpm-macros@3.8.0-2.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-bin-s390x", "name": "golang1.27-bin", "versionInfo": "1.27.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/golang1.27-bin-1.27.2-1.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: e6a920d4eb2b33fcb2475d86a4b28401"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27-bin@1.27.2-1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-src-s390x", "name": "golang1.27-src", "versionInfo": "1.27.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/golang1.27-src-1.27.2-1.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: f40c9e87cab011209fed012b75f85d64"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27-src@1.27.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-s390x", "name": "golang1.27", "versionInfo": "1.27.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/golang1.27-1.27.2-1.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 46513f6da828743f955dd01c4e4048e3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27@1.27.2-1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golist-s390x", "name": "golist", "versionInfo": "0.10.4-11.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora-secondary/releases/44/Everything/s390x/os/Packages/g/golist-0.10.4-11.fc44.s390x.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 33a730e9c0e05ea94958b3e133ad96e7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golist@0.10.4-11.fc44?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gpgme-devel-s390x", "name": "gpgme-devel", "versionInfo": "2.0.1-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gpgme-devel-2.0.1-6.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: ac0ee664d77ef85657bfd9c59a1d4ff8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gpgme-devel@2.0.1-6.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gpgme-s390x", "name": "gpgme", "versionInfo": "2.0.1-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gpgme-2.0.1-6.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 58b13e6046311c02a9ef947281dd8775"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gpgme@2.0.1-6.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gpgverify-s390x", "name": "gpgverify", "versionInfo": "2.2-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gpgverify-2.2-5.hum1.noarch.rpm", "licenseDeclared": "Boehm-GC", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 9637bdca60814388d4c5b144d923e6d4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gpgverify@2.2-5.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-grep-s390x", "name": "grep", "versionInfo": "3.12-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/grep-3.12-4.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: be302c3fba90b6802d063da201229aba"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/grep@3.12-4.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gzip-s390x", "name": "gzip", "versionInfo": "1.15-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gzip-1.15-1.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: e975013a39c5a3abacf0746083cb2a3f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gzip@1.15-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-gpg-keys-s390x", "name": "hummingbird-gpg-keys", "versionInfo": "20251124-1.17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/h/hummingbird-gpg-keys-20251124-1.17.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 01a73721cc0ecdcb5d9f3929f6777157"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-gpg-keys@20251124-1.17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-release-s390x", "name": "hummingbird-release", "versionInfo": "20251124-1.17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/h/hummingbird-release-20251124-1.17.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: d1c993eba75002797ea72c3cd1266853"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-release@20251124-1.17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-repos-s390x", "name": "hummingbird-repos", "versionInfo": "20251124-1.17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/h/hummingbird-repos-20251124-1.17.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 1704eb0434ddab68e1c756070246f576"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-repos@20251124-1.17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ima-evm-utils-libs-s390x", "name": "ima-evm-utils-libs", "versionInfo": "1.6.2-12.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/i/ima-evm-utils-libs-1.6.2-12.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 39381b73d7f0bf0b47d0f43e2553085b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ima-evm-utils-libs@1.6.2-12.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-info-s390x", "name": "info", "versionInfo": "7.2-9.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora-secondary/releases/44/Everything/s390x/os/Packages/i/info-7.2-9.fc44.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: fff27099388f98905cc71156882366f9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/info@7.2-9.fc44?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-jansson-s390x", "name": "jansson", "versionInfo": "2.14-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/j/jansson-2.14-5.1.hum1.s390x.rpm", "licenseDeclared": "MIT AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 552c8b09d6f785ebe3ecf37d2a97b709"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/jansson@2.14-5.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-java-srpm-macros-s390x", "name": "java-srpm-macros", "versionInfo": "1-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/j/java-srpm-macros-1-9.hum1.noarch.rpm", "licenseDeclared": "MIT-0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 367fafb59cbd6a02034ba8bafdafe9c9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/java-srpm-macros@1-9.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-json-c-s390x", "name": "json-c", "versionInfo": "0.18-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/j/json-c-0.18-9.1.hum1.s390x.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 8d14ce4c56a1c08cec53088767d4424c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/json-c@0.18-9.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-kernel-headers-s390x", "name": "kernel-headers", "versionInfo": "7.2.0-61.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/k/kernel-headers-7.2.0-61.1.hum1.s390x.rpm", "licenseDeclared": "((GPL-2.0-only WITH Linux-syscall-note) OR BSD-2-Clause) AND ((GPL-2.0-only WITH Linux-syscall-note) OR BSD-3-Clause) AND ((GPL-2.0-only WITH Linux-syscall-note) OR CDDL-1.0) AND ((GPL-2.0-only WITH Linux-syscall-note) OR Linux-OpenIB) AND ((GPL-2.0-only WITH Linux-syscall-note) OR MIT) AND ((GPL-2.0-or-later WITH Linux-syscall-note) OR BSD-3-Clause) AND ((GPL-2.0-or-later WITH Linux-syscall-note) OR MIT) AND BSD-3-Clause AND (GPL-1.0-or-later WITH Linux-syscall-note) AND GPL-2.0-only AND (GPL-2.0-only WITH Linux-syscall-note) AND (GPL-2.0-or-later WITH Linux-syscall-note) AND (LGPL-2.0-or-later WITH Linux-syscall-note) AND (LGPL-2.1-only WITH Linux-syscall-note) AND (LGPL-2.1-or-later WITH Linux-syscall-note) AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 116d73f463cd21f533e34ba97a2011de"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/kernel-headers@7.2.0-61.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-kernel-srpm-macros-s390x", "name": "kernel-srpm-macros", "versionInfo": "1.0-30.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/k/kernel-srpm-macros-1.0-30.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: d6fe851b8eed59b0b3ed90411974a3f1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/kernel-srpm-macros@1.0-30.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-keyutils-libs-s390x", "name": "keyutils-libs", "versionInfo": "1.6.3-8.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/k/keyutils-libs-1.6.3-8.1.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 76a1051bcc56312b436407503fd6a16e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/keyutils-libs@1.6.3-8.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-krb5-libs-s390x", "name": "krb5-libs", "versionInfo": "1.22.2-10.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/k/krb5-libs-1.22.2-10.3.hum1.s390x.rpm", "licenseDeclared": "Brian-Gladman-2-Clause AND BSD-2-Clause AND (BSD-2-Clause OR GPL-2.0-or-later) AND BSD-2-Clause-first-lines AND BSD-3-Clause AND BSD-4-Clause AND CMU-Mach-nodoc AND FSFULLRWD AND HPND AND HPND-export2-US AND HPND-export-US AND HPND-export-US-acknowledgement AND HPND-export-US-modify AND ISC AND MIT AND MIT-CMU AND OLDAP-2.8 AND OpenVision", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 5ead3540a46eeab91cdeba262d8b04ae"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/krb5-libs@1.22.2-10.3.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-less-s390x", "name": "less", "versionInfo": "710-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/less-710-1.1.hum1.s390x.rpm", "licenseDeclared": "(GPL-3.0-only OR BSD-2-Clause) AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: a0db276419996716a56f3e761bd654d3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/less@710-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libacl-s390x", "name": "libacl", "versionInfo": "2.4.0-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libacl-2.4.0-2.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 9bfd8102f8671689a86d2afeb0169efc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libacl@2.4.0-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libarchive-s390x", "name": "libarchive", "versionInfo": "3.8.9-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libarchive-3.8.9-2.1.hum1.s390x.rpm", "licenseDeclared": "BSD-2-Clause AND FSFULLR AND GPL-2.0-or-later WITH Libtool-exception AND BSD-3-Clause AND FSFUL", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 813096ea6994141a774ae73f5dfb54bf"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libarchive@3.8.9-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libasan-s390x", "name": "libasan", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libasan-16.2.1-3.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 7aa5b365b15f58604609f7538938d8c2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libasan@16.2.1-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libassuan-devel-s390x", "name": "libassuan-devel", "versionInfo": "2.5.7-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libassuan-devel-2.5.7-6.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: aeff8c95d5e85a999962a0ef60c2b545"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libassuan-devel@2.5.7-6.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libassuan-s390x", "name": "libassuan", "versionInfo": "2.5.7-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libassuan-2.5.7-6.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 4562a9a9f17335e55b18d88835ef5f07"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libassuan@2.5.7-6.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libatomic-s390x", "name": "libatomic", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libatomic-16.2.1-3.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 6376aafb0a9925918e64aa80b4ed35ab"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libatomic@16.2.1-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libattr-s390x", "name": "libattr", "versionInfo": "2.6.0-2.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libattr-2.6.0-2.2.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: bd5a29f86127e125b4675f2e23ca8ef8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libattr@2.6.0-2.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libblkid-devel-s390x", "name": "libblkid-devel", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libblkid-devel-2.42.4-2.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: bd5132b07269d629ec1a2bab01719a89"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libblkid-devel@2.42.4-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libblkid-s390x", "name": "libblkid", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libblkid-2.42.4-2.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 44fc0311a5d308711efa28535704e4a7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libblkid@2.42.4-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libbrotli-s390x", "name": "libbrotli", "versionInfo": "1.2.0-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libbrotli-1.2.0-6.1.hum1.s390x.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: a864079840107557972998cffe7fedd9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libbrotli@1.2.0-6.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libbtrfsutil-s390x", "name": "libbtrfsutil", "versionInfo": "7.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libbtrfsutil-7.1-3.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: f4474b0c5d90685ec3d9a48a5e850068"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libbtrfsutil@7.1-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libbtrfs-s390x", "name": "libbtrfs", "versionInfo": "7.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libbtrfs-7.1-3.1.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 42ef2b30ec9cc6e021537e6f813d9455"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libbtrfs@7.1-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcap-ng-s390x", "name": "libcap-ng", "versionInfo": "0.9.6-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libcap-ng-0.9.6-1.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 142580b7f2e40636bb89c0f2215f9141"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcap-ng@0.9.6-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcap-s390x", "name": "libcap", "versionInfo": "2.78-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libcap-2.78-2.1.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 9091cd31b413ae1bf00d63ae33335979"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcap@2.78-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcbor-s390x", "name": "libcbor", "versionInfo": "0.14.0-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libcbor-0.14.0-3.1.hum1.s390x.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: c4b517d10dc0c6ac44d8ea9c33b33648"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcbor@0.14.0-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcom-err-s390x", "name": "libcom_err", "versionInfo": "1.47.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libcom_err-1.47.4-2.1.hum1.s390x.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 3283a8bc54cd1140763e358dda77d1db"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcom_err@1.47.4-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcurl-s390x", "name": "libcurl", "versionInfo": "8.22.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libcurl-8.22.0-1.1.hum1.s390x.rpm", "licenseDeclared": "curl", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 0c5b302f2cbe4adbfed83efcf6525505"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcurl@8.22.0-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libeconf-s390x", "name": "libeconf", "versionInfo": "0.7.9-4.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libeconf-0.7.9-4.2.hum1.s390x.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 24897f69657431bf5a09b97a16595098"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libeconf@0.7.9-4.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libedit-s390x", "name": "libedit", "versionInfo": "3.1-60.20260512cvs.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libedit-3.1-60.20260512cvs.1.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause AND BSD-2-Clause AND ISC", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 11cdb649f3af9f6b89540978768b65a8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libedit@3.1-60.20260512cvs.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libevent-s390x", "name": "libevent", "versionInfo": "2.1.13-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libevent-2.1.13-1.1.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause AND ISC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 6bd1ad8bb5100a92ba23105085cc3bbb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libevent@2.1.13-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfdisk-s390x", "name": "libfdisk", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libfdisk-2.42.4-2.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: bf76b0eac43d5f3ad92d590f7e25c4c6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfdisk@2.42.4-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libffi-devel-s390x", "name": "libffi-devel", "versionInfo": "3.8.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libffi-devel-3.8.0-1.1.hum1.s390x.rpm", "licenseDeclared": "MIT AND CC-PDDC AND (GPL-3.0-or-later WITH Texinfo-exception)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: e9c7f30ecd447b9e93fd418c2d706a45"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libffi-devel@3.8.0-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libffi-s390x", "name": "libffi", "versionInfo": "3.8.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libffi-3.8.0-1.1.hum1.s390x.rpm", "licenseDeclared": "MIT AND CC-PDDC AND (GPL-3.0-or-later WITH Texinfo-exception)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: daa1490d61693f9116936c3d876b5ffb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libffi@3.8.0-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfido2-s390x", "name": "libfido2", "versionInfo": "1.17.0-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libfido2-1.17.0-6.2.hum1.s390x.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 82bfccfc4dc3b475c75118f9bc74c2e6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfido2@1.17.0-6.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfsverity-s390x", "name": "libfsverity", "versionInfo": "1.7-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libfsverity-1.7-4.1.hum1.s390x.rpm", "licenseDeclared": "NOASSERTION", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 384831578e6b342f78c6ac2bca35e630"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfsverity@1.7-4.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgcc-s390x", "name": "libgcc", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libgcc-16.2.1-3.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: c427ffaf507d6cac77dae12f76be7f97"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgcc@16.2.1-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgcrypt-s390x", "name": "libgcrypt", "versionInfo": "1.12.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libgcrypt-1.12.4-1.1.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause AND (BSD-3-Clause OR GPL-2.0-only) AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later AND MIT-Modern-Variant", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 2446883791ed569227c74549116e4160"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgcrypt@1.12.4-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgomp-s390x", "name": "libgomp", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libgomp-16.2.1-3.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 7a48dd387cf2dcca87af9029bd52a9ce"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgomp@16.2.1-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgpg-error-devel-s390x", "name": "libgpg-error-devel", "versionInfo": "1.61-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libgpg-error-devel-1.61-2.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later AND (BSD-3-Clause OR LGPL-2.1-or-later) AND FSFULLR AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: cd1b03757b7c26d2f877e0f2a55ec44d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgpg-error-devel@1.61-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgpg-error-s390x", "name": "libgpg-error", "versionInfo": "1.61-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libgpg-error-1.61-2.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later AND (BSD-3-Clause OR LGPL-2.1-or-later) AND FSFULLR AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: ffb6f30df74b815e445d90d11515374e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgpg-error@1.61-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libidn2-s390x", "name": "libidn2", "versionInfo": "2.3.8-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libidn2-2.3.8-4.1.hum1.s390x.rpm", "licenseDeclared": "(GPL-2.0-or-later OR LGPL-3.0-or-later) AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 2d2df588b059873f276603a60db2d959"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libidn2@2.3.8-4.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libksba-s390x", "name": "libksba", "versionInfo": "1.8.1-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libksba-1.8.1-1.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND (LGPL-3.0-or-later OR GPL-2.0-or-later)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 2e61e170caccf8c88ad1f90025ac5db2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libksba@1.8.1-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-liblastlog2-s390x", "name": "liblastlog2", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/liblastlog2-2.42.4-2.1.hum1.s390x.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 28b1b1bcf834fa96e49837fc22c3f84a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/liblastlog2@2.42.4-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libmount-devel-s390x", "name": "libmount-devel", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libmount-devel-2.42.4-2.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 41689bcb873136f0982f6785f27254de"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libmount-devel@2.42.4-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libmount-s390x", "name": "libmount", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libmount-2.42.4-2.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: db23cb3112e0cef438ea2161e8f78959"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libmount@2.42.4-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libmpc-s390x", "name": "libmpc", "versionInfo": "1.4.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libmpc-1.4.1-2.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-3.0-or-later AND FSFAP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 88c6114ff75a60cb530e1c930e8e48a0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libmpc@1.4.1-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnghttp2-s390x", "name": "libnghttp2", "versionInfo": "1.69.0-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libnghttp2-1.69.0-6.1.hum1.s390x.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: dc406785eee18fa7e061c5e1fce9c144"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnghttp2@1.69.0-6.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnghttp3-s390x", "name": "libnghttp3", "versionInfo": "1.18.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libnghttp3-1.18.0-1.1.hum1.s390x.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 3976c42ace169ac57da71f3840eb2567"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnghttp3@1.18.0-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnsl2-s390x", "name": "libnsl2", "versionInfo": "2.0.1-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libnsl2-2.0.1-6.1.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 07636fc8b7f5e55a28ecd6853d3cd1ce"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnsl2@2.0.1-6.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpkgconf-s390x", "name": "libpkgconf", "versionInfo": "2.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libpkgconf-2.5.1-2.1.hum1.s390x.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: f9793e392b28a496c552c8bcadc861d7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpkgconf@2.5.1-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpsl-s390x", "name": "libpsl", "versionInfo": "0.23.3-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libpsl-0.23.3-1.1.hum1.s390x.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: d7292c40c0f03cff92d9a954d31a28a4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpsl@0.23.3-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpwquality-s390x", "name": "libpwquality", "versionInfo": "1.4.5-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libpwquality-1.4.5-18.2.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: a12943f5540ece1c718b41877dcd3c12"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpwquality@1.4.5-18.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libseccomp-devel-s390x", "name": "libseccomp-devel", "versionInfo": "2.6.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libseccomp-devel-2.6.1-3.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 7902aab82556d7075d6463f633159c56"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libseccomp-devel@2.6.1-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libseccomp-static-s390x", "name": "libseccomp-static", "versionInfo": "2.6.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libseccomp-static-2.6.1-3.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 173fedfdd13def19e09fa9df9ff106a4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libseccomp-static@2.6.1-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libseccomp-s390x", "name": "libseccomp", "versionInfo": "2.6.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libseccomp-2.6.1-3.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 97e2a99b03d06a0fdb8895f13d65732e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libseccomp@2.6.1-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libselinux-devel-s390x", "name": "libselinux-devel", "versionInfo": "3.11-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libselinux-devel-3.11-5.1.hum1.s390x.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 9750985ed48851ddce341f220c8efe78"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libselinux-devel@3.11-5.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libselinux-utils-s390x", "name": "libselinux-utils", "versionInfo": "3.11-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libselinux-utils-3.11-5.1.hum1.s390x.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 461c4567453d97fc7bc74bf42c057eee"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libselinux-utils@3.11-5.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libselinux-s390x", "name": "libselinux", "versionInfo": "3.11-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libselinux-3.11-5.1.hum1.s390x.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 138830aa1320f79f6da74bfa4ad320fd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libselinux@3.11-5.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsemanage-s390x", "name": "libsemanage", "versionInfo": "3.11-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libsemanage-3.11-4.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: bab522bfb7542ee5ef7396dadbb3cfa2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsemanage@3.11-4.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsepol-devel-s390x", "name": "libsepol-devel", "versionInfo": "3.11-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libsepol-devel-3.11-2.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 9368fa5108ca405a588c7f12da075fad"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsepol-devel@3.11-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsepol-s390x", "name": "libsepol", "versionInfo": "3.11-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libsepol-3.11-2.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: d354f33b171ee2e3daf8d1b80681816e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsepol@3.11-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsmartcols-s390x", "name": "libsmartcols", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libsmartcols-2.42.4-2.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: aebcd90843b2b9d05b05d8306381672c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsmartcols@2.42.4-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libssh-config-s390x", "name": "libssh-config", "versionInfo": "0.12.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libssh-config-0.12.2-1.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: f26ba5abb68d2fea08f751a8569faa35"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libssh-config@0.12.2-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libssh-s390x", "name": "libssh", "versionInfo": "0.12.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libssh-0.12.2-1.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 5cfcc7161aaa41cb9aabd429dd169933"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libssh@0.12.2-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libstdc++-s390x", "name": "libstdc++", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libstdc++-16.2.1-3.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 6575e03b09d764dc0b2f10318e3de716"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libstdc++@16.2.1-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtasn1-s390x", "name": "libtasn1", "versionInfo": "4.21.0-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libtasn1-4.21.0-2.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 55fcdd9b3d9fd6cad565d3d015649f77"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtasn1@4.21.0-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtirpc-s390x", "name": "libtirpc", "versionInfo": "1.3.8-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libtirpc-1.3.8-0.1.hum1.s390x.rpm", "licenseDeclared": "SISSL AND BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: d59ecf7468d6d68da11136fbb211ccd2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtirpc@1.3.8-0.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtool-ltdl-s390x", "name": "libtool-ltdl", "versionInfo": "2.6.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libtool-ltdl-2.6.2-1.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.0-or-later WITH Libtool-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 36bcc2c9c6efc6d7d0321cadac6cb85a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtool-ltdl@2.6.2-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libubsan-s390x", "name": "libubsan", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libubsan-16.2.1-3.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 368cf49e4a1d8d82ad82adf7447c95ac"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libubsan@16.2.1-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libunistring-s390x", "name": "libunistring", "versionInfo": "1.1-12.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libunistring-1.1-12.1.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: dd91f18d5af4f20ef9799606225e7449"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libunistring@1.1-12.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libusb1-s390x", "name": "libusb1", "versionInfo": "1.0.30-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libusb1-1.0.30-2.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: c98671d5cd78fd08e6914d049a797031"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libusb1@1.0.30-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libuuid-s390x", "name": "libuuid", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libuuid-2.42.4-2.1.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 0615723305ba8a79b30a6cdf82867fba"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libuuid@2.42.4-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libverto-s390x", "name": "libverto", "versionInfo": "0.3.2-13.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libverto-0.3.2-13.1.hum1.s390x.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: cb13852cb7d6b81b85fe55511359e65f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libverto@0.3.2-13.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxcrypt-devel-s390x", "name": "libxcrypt-devel", "versionInfo": "4.5.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libxcrypt-devel-4.5.2-4.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later AND BSD-3-Clause AND BSD-2-Clause AND BSD-2-Clause-FreeBSD AND 0BSD AND CC0-1.0 AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 1b780c78e6f5b4a014060e49fa55b087"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxcrypt-devel@4.5.2-4.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxcrypt-static-s390x", "name": "libxcrypt-static", "versionInfo": "4.5.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libxcrypt-static-4.5.2-4.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later AND BSD-3-Clause AND BSD-2-Clause AND BSD-2-Clause-FreeBSD AND 0BSD AND CC0-1.0 AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 42051ed4e750f9b42f6e73e4e39165e6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxcrypt-static@4.5.2-4.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxcrypt-s390x", "name": "libxcrypt", "versionInfo": "4.5.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libxcrypt-4.5.2-4.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later AND BSD-3-Clause AND BSD-2-Clause AND BSD-2-Clause-FreeBSD AND 0BSD AND CC0-1.0 AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 08be51fb7f0629c9314cec58dee56978"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxcrypt@4.5.2-4.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxml2-16-s390x", "name": "libxml2-16", "versionInfo": "2.15.4-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libxml2-16-2.15.4-1.2.hum1.s390x.rpm", "licenseDeclared": "MIT AND ISC-Veillard AND W3C", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 01d31764a91a3b2444e68b22de4a4218"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxml2-16@2.15.4-1.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libzstd-s390x", "name": "libzstd", "versionInfo": "1.5.7-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libzstd-1.5.7-6.2.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: ed6549da4aaaf48bdfcc6793aed1854b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libzstd@1.5.7-6.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-linkdupes-s390x", "name": "linkdupes", "versionInfo": "0.7.3-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/linkdupes-0.7.3-3.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND MIT AND Unicode-DFS-2016 AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND (MIT OR Zlib OR Apache-2.0) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: bc74850de3edd8bd9623e57227b10792"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/linkdupes@0.7.3-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lua-libs-s390x", "name": "lua-libs", "versionInfo": "5.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/lua-libs-5.5.1-2.1.hum1.s390x.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 7ace7a3ea0a18dfbebe513dcd0fd92d3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lua-libs@5.5.1-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lua-srpm-macros-s390x", "name": "lua-srpm-macros", "versionInfo": "1-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/lua-srpm-macros-1-18.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 68293f00751e1bc423b0bb2ac4e21221"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lua-srpm-macros@1-18.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lz4-libs-s390x", "name": "lz4-libs", "versionInfo": "1.10.0-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/lz4-libs-1.10.0-5.1.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-or-later AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: c5e182e1b1badbfacae862d39241e7bd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lz4-libs@1.10.0-5.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lzo-s390x", "name": "lzo", "versionInfo": "2.10-17.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/lzo-2.10-17.1.hum1.s390x.rpm", "licenseDeclared": "gpl-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 88f3ea167a58b91696c7328d1fd2a0cd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lzo@2.10-17.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-make-s390x", "name": "make", "versionInfo": "1:4.4.1-13.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/m/make-4.4.1-13.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND GFDL-1.3-or-later AND FSFULLR", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: ae6b3fc3315c06929f5b817212fac215"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/make@4.4.1-13.1.hum1?arch=s390x&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-meson-srpm-macros-s390x", "name": "meson-srpm-macros", "versionInfo": "1.12.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/m/meson-srpm-macros-1.12.1-2.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 7617c98560a327b943961c400248f04b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/meson-srpm-macros@1.12.1-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-mpdecimal-s390x", "name": "mpdecimal", "versionInfo": "4.0.1-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/m/mpdecimal-4.0.1-4.1.hum1.s390x.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: e761ecb4256b8813aed551523066abed"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/mpdecimal@4.0.1-4.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-mpfr-s390x", "name": "mpfr", "versionInfo": "4.2.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/m/mpfr-4.2.2-4.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: d28d4cb6e1defa71fd6b17a0d945accf"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/mpfr@4.2.2-4.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ncurses-base-s390x", "name": "ncurses-base", "versionInfo": "6.6-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/n/ncurses-base-6.6-3.1.hum1.noarch.rpm", "licenseDeclared": "MIT-open-group", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: a90d36a4f9603dffe4896cbc1c4c42c0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ncurses-base@6.6-3.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ncurses-libs-s390x", "name": "ncurses-libs", "versionInfo": "6.6-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/n/ncurses-libs-6.6-3.1.hum1.s390x.rpm", "licenseDeclared": "MIT-open-group", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 44c15d427cdc441e17793d8861c7fbcb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ncurses-libs@6.6-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-nettle-s390x", "name": "nettle", "versionInfo": "4.0-5.5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/n/nettle-4.0-5.5.hum1.s390x.rpm", "licenseDeclared": "LGPL-3.0-or-later OR GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 8431f7529e7509272936ea0226303a9b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/nettle@4.0-5.5.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ngtcp2-crypto-ossl-s390x", "name": "ngtcp2-crypto-ossl", "versionInfo": "1.22.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/n/ngtcp2-crypto-ossl-1.22.1-3.1.hum1.s390x.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 99da38ce162d9f06ee77852585011a58"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ngtcp2-crypto-ossl@1.22.1-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ngtcp2-s390x", "name": "ngtcp2", "versionInfo": "1.22.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/n/ngtcp2-1.22.1-3.1.hum1.s390x.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 6b2a694f6b84034640dd546dbf12d430"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ngtcp2@1.22.1-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-npth-s390x", "name": "npth", "versionInfo": "1.8-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/n/npth-1.8-5.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: fc87bebb4c17d7b4d0a29da58a700725"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/npth@1.8-5.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ocaml-srpm-macros-s390x", "name": "ocaml-srpm-macros", "versionInfo": "11-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/o/ocaml-srpm-macros-11-4.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 6d563b597c552c5ce842bdd83b6d8dd1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ocaml-srpm-macros@11-4.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openblas-srpm-macros-s390x", "name": "openblas-srpm-macros", "versionInfo": "2-23.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/o/openblas-srpm-macros-2-23.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: bf3a7ebbd05d3c09e9712e957b99d3b5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openblas-srpm-macros@2-23.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openldap-s390x", "name": "openldap", "versionInfo": "2.6.15-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/o/openldap-2.6.15-1.1.hum1.s390x.rpm", "licenseDeclared": "OLDAP-2.8", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: e255cdc3b91df628373758b223fe3454"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openldap@2.6.15-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssh-clients-s390x", "name": "openssh-clients", "versionInfo": "10.2p1-14.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora-secondary/updates/44/Everything/s390x/Packages/o/openssh-clients-10.2p1-14.fc44.s390x.rpm", "licenseDeclared": "BSD-3-Clause AND BSD-2-Clause AND ISC AND SSH-OpenSSH AND ssh-keyscan AND snprintf AND LicenseRef-Fedora-Public-Domain AND X11-distribute-modifications-variant", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: ad8f6808394e0f5baeb974a0c6c61638"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssh-clients@10.2p1-14.fc44?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssh-s390x", "name": "openssh", "versionInfo": "10.2p1-14.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora-secondary/updates/44/Everything/s390x/Packages/o/openssh-10.2p1-14.fc44.s390x.rpm", "licenseDeclared": "BSD-3-Clause AND BSD-2-Clause AND ISC AND SSH-OpenSSH AND ssh-keyscan AND snprintf AND LicenseRef-Fedora-Public-Domain AND X11-distribute-modifications-variant", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 225548819e293a79c2b91dca4c728b58"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssh@10.2p1-14.fc44?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssl-fips-provider-upstream-s390x", "name": "openssl-fips-provider-upstream", "versionInfo": "1:3.5.9-0.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/o/openssl-fips-provider-upstream-3.5.9-0.3.hum1.s390x.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: c970b2cdf7483b9239d16e5c31388dd1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssl-fips-provider-upstream@3.5.9-0.3.hum1?arch=s390x&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssl-libs-s390x", "name": "openssl-libs", "versionInfo": "1:3.5.9-0.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/o/openssl-libs-3.5.9-0.3.hum1.s390x.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 37a8d14c3643586907cf278b82651d42"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssl-libs@3.5.9-0.3.hum1?arch=s390x&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-p11-kit-trust-s390x", "name": "p11-kit-trust", "versionInfo": "0.26.5-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/p11-kit-trust-0.26.5-1.1.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 3ae87eeb33ed8f9e94d75b32bfa1763f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/p11-kit-trust@0.26.5-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-p11-kit-s390x", "name": "p11-kit", "versionInfo": "0.26.5-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/p11-kit-0.26.5-1.1.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 2b92aca4049128081bf8041e53744551"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/p11-kit@0.26.5-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-package-notes-srpm-macros-s390x", "name": "package-notes-srpm-macros", "versionInfo": "0.20-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/package-notes-srpm-macros-0.20-2.hum1.noarch.rpm", "licenseDeclared": "0BSD", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 4f6f48e6009eb2455ec194f477f9b058"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/package-notes-srpm-macros@0.20-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pam-libs-s390x", "name": "pam-libs", "versionInfo": "1.7.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/pam-libs-1.7.2-4.1.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: d493aa4fccfe30eeac848344adb1e973"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pam-libs@1.7.2-4.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pam-s390x", "name": "pam", "versionInfo": "1.7.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/pam-1.7.2-4.1.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: eba1b27922e6e1b9595111ebda95ba7f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pam@1.7.2-4.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-patch-s390x", "name": "patch", "versionInfo": "2.8-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/patch-2.8-6.2.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 83763fc465233583ed914a204f17ca35"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/patch@2.8-6.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-devel-s390x", "name": "pcre2-devel", "versionInfo": "10.49-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/pcre2-devel-10.49-0.2.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 113ea701f35c976aaa7eb22baea62c46"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2-devel@10.49-0.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-syntax-s390x", "name": "pcre2-syntax", "versionInfo": "10.49-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/pcre2-syntax-10.49-0.2.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 5892ce77122ec3ecfec34fe8679d2737"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2-syntax@10.49-0.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-utf16-s390x", "name": "pcre2-utf16", "versionInfo": "10.49-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/pcre2-utf16-10.49-0.2.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 3010cf9b50ad93234df9f4015e461f88"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2-utf16@10.49-0.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-utf32-s390x", "name": "pcre2-utf32", "versionInfo": "10.49-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/pcre2-utf32-10.49-0.2.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 673b51d1036de32b48fa71b23bc71ff6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2-utf32@10.49-0.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-s390x", "name": "pcre2", "versionInfo": "10.49-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/pcre2-10.49-0.2.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 969d2435bc379b17d80e15a7454b108b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2@10.49-0.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-perl-srpm-macros-s390x", "name": "perl-srpm-macros", "versionInfo": "1-65.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/perl-srpm-macros-1-65.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 0f8b16c4e63430bcff87cb49fa941740"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/perl-srpm-macros@1-65.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-m4-s390x", "name": "pkgconf-m4", "versionInfo": "2.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/pkgconf-m4-2.5.1-2.1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later WITH Autoconf-exception-generic", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 2ee038a201817d6d825292dc25c6b873"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf-m4@2.5.1-2.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-pkg-config-s390x", "name": "pkgconf-pkg-config", "versionInfo": "2.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/pkgconf-pkg-config-2.5.1-2.1.hum1.s390x.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 1d2899e00e34310d47b2b7421b6007e3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf-pkg-config@2.5.1-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-s390x", "name": "pkgconf", "versionInfo": "2.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/pkgconf-2.5.1-2.1.hum1.s390x.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 7ee4fafd972590d96ea9e6bf8752b773"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf@2.5.1-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-policycoreutils-s390x", "name": "policycoreutils", "versionInfo": "3.11-2.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/policycoreutils-3.11-2.3.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 7cd89314b9f5a5bb496f382f69c5bc1b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/policycoreutils@3.11-2.3.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-popt-s390x", "name": "popt", "versionInfo": "1.19-11.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/popt-1.19-11.2.hum1.s390x.rpm", "licenseDeclared": "MIT AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 554f50854a7348f8f82ef61572328c5a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/popt@1.19-11.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-publicsuffix-list-dafsa-s390x", "name": "publicsuffix-list-dafsa", "versionInfo": "20260624-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/publicsuffix-list-dafsa-20260624-2.1.hum1.noarch.rpm", "licenseDeclared": "MPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 258b22e06326223e99678d8138bba57d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/publicsuffix-list-dafsa@20260624-2.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pyproject-srpm-macros-s390x", "name": "pyproject-srpm-macros", "versionInfo": "1.23.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/pyproject-srpm-macros-1.23.2-1.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: e82edc55e5be2f520af44c2b0337e92a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pyproject-srpm-macros@1.23.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python-pip-wheel-s390x", "name": "python-pip-wheel", "versionInfo": "26.2-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/python-pip-wheel-26.2-0.2.hum1.noarch.rpm", "licenseDeclared": "MIT AND Python-2.0.1 AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MPL-2.0 AND (Apache-2.0 OR BSD-2-Clause)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 30b1136e6baf2dc70c7e01a45cf96050"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python-pip-wheel@26.2-0.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python-srpm-macros-s390x", "name": "python-srpm-macros", "versionInfo": "3.14-12.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/python-srpm-macros-3.14-12.2.hum1.noarch.rpm", "licenseDeclared": "MIT AND PSF-2.0 AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 618d0c006548a702f22df8ec49dca3a5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python-srpm-macros@3.14-12.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-libs-s390x", "name": "python3-libs", "versionInfo": "3.14.8-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/python3-libs-3.14.8-1.1.hum1.s390x.rpm", "licenseDeclared": "Python-2.0.1 AND MIT AND BSD-3-Clause AND MIT-CMU AND HPND-SMC AND BSD-2-Clause AND dtoa AND Unicode-3.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 6f8a07d52c73aedd90eaf17e9963afb0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-libs@3.14.8-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-packaging-s390x", "name": "python3-packaging", "versionInfo": "26.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/python3-packaging-26.2-4.1.hum1.noarch.rpm", "licenseDeclared": "BSD-2-Clause OR Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: cc27501b93aed57fe401a0e3e4befdf2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-packaging@26.2-4.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-s390x", "name": "python3", "versionInfo": "3.14.8-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/python3-3.14.8-1.1.hum1.s390x.rpm", "licenseDeclared": "Python-2.0.1", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 8329d32d747dd00a85a694e1d852200f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3@3.14.8-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-qt5-srpm-macros-s390x", "name": "qt5-srpm-macros", "versionInfo": "5.15.18-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/q/qt5-srpm-macros-5.15.18-3.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 4ffb52b3bdf4017e6c58f49b621e1c54"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/qt5-srpm-macros@5.15.18-3.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-qt6-srpm-macros-s390x", "name": "qt6-srpm-macros", "versionInfo": "6.11.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/q/qt6-srpm-macros-6.11.2-1.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 8478ebf3654d031de2c0964fb1f5d8a2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/qt6-srpm-macros@6.11.2-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-readline-s390x", "name": "readline", "versionInfo": "8.3-7.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/r/readline-8.3-7.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: a70c027f9fb815d87b68a1f88b0fb488"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/readline@8.3-7.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-redhat-rpm-config-s390x", "name": "redhat-rpm-config", "versionInfo": "345-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/r/redhat-rpm-config-345-4.hum1.noarch.rpm", "licenseDeclared": "GPL-1.0-or-later AND GPL-2.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 9e9b9de801d40d8b16d77058da82cde9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/redhat-rpm-config@345-4.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-build-libs-s390x", "name": "rpm-build-libs", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/r/rpm-build-libs-6.1.0-1.2.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 5f2088971269dd65910342236bbcd087"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-build-libs@6.1.0-1.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-build-s390x", "name": "rpm-build", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/r/rpm-build-6.1.0-1.2.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 6545ce3e22b19ae3faa5e35c87cb323a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-build@6.1.0-1.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-libs-s390x", "name": "rpm-libs", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/r/rpm-libs-6.1.0-1.2.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 71f9d1092ecb70ce1080123c49e1d560"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-libs@6.1.0-1.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-plugin-selinux-s390x", "name": "rpm-plugin-selinux", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/r/rpm-plugin-selinux-6.1.0-1.2.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 89f628bbfaa752a6d7a217a1b9cb49a1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-plugin-selinux@6.1.0-1.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-sequoia-s390x", "name": "rpm-sequoia", "versionInfo": "1.10.1.1-1.5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/r/rpm-sequoia-1.10.1.1-1.5.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.0-or-later AND Apache-2.0 AND BSL-1.0 AND MIT AND Unicode-DFS-2016 AND (Apache-2.0 OR MIT) AND (MIT OR Apache-2.0 OR Zlib) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 228a62227d7dd60cd6a935f4a4f08567"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-sequoia@1.10.1.1-1.5.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-sign-libs-s390x", "name": "rpm-sign-libs", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/r/rpm-sign-libs-6.1.0-1.2.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: afdc299a6da2e389cb249d5c263772cd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-sign-libs@6.1.0-1.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-s390x", "name": "rpm", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/r/rpm-6.1.0-1.2.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 9378d50306221b24d269df7fee547c98"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm@6.1.0-1.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rust-srpm-macros-s390x", "name": "rust-srpm-macros", "versionInfo": "28.5-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/r/rust-srpm-macros-28.5-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 606a7a2166723ba0e3515fa8244596dc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rust-srpm-macros@28.5-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sed-s390x", "name": "sed", "versionInfo": "4.10-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/s/sed-4.10-2.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 67cda685cb70b3748edada0ba481db24"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sed@4.10-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-selinux-policy-targeted-s390x", "name": "selinux-policy-targeted", "versionInfo": "45.21-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/s/selinux-policy-targeted-45.21-1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: afd3a0e6066718b6633918ff5031c1ce"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/selinux-policy-targeted@45.21-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-selinux-policy-s390x", "name": "selinux-policy", "versionInfo": "45.21-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/s/selinux-policy-45.21-1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 910958d9c5c1913d447a1e64fb0ad0b6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/selinux-policy@45.21-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-setup-s390x", "name": "setup", "versionInfo": "2.15.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/s/setup-2.15.1-2.1.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 7306efa4649c49f3d249269ae6781e58"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/setup@2.15.1-2.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-shadow-utils-subid-devel-s390x", "name": "shadow-utils-subid-devel", "versionInfo": "2:4.20.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/s/shadow-utils-subid-devel-4.20.0-1.1.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 43bfed9d78a3c66773d2a1867f76ec75"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/shadow-utils-subid-devel@4.20.0-1.1.hum1?arch=s390x&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-shadow-utils-subid-s390x", "name": "shadow-utils-subid", "versionInfo": "2:4.20.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/s/shadow-utils-subid-4.20.0-1.1.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: b03ef9ec295012281fc681b6b986ee7a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/shadow-utils-subid@4.20.0-1.1.hum1?arch=s390x&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-shadow-utils-s390x", "name": "shadow-utils", "versionInfo": "2:4.20.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/s/shadow-utils-4.20.0-1.1.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 44d5607c139bd8e95d56bb76b39f25a3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/shadow-utils@4.20.0-1.1.hum1?arch=s390x&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sqlite-devel-s390x", "name": "sqlite-devel", "versionInfo": "3.54.0-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/s/sqlite-devel-3.54.0-0.1.hum1.s390x.rpm", "licenseDeclared": "blessing", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 0cc4a6b79d132e06f459654dadd5f701"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sqlite-devel@3.54.0-0.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sqlite-libs-s390x", "name": "sqlite-libs", "versionInfo": "3.54.0-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/s/sqlite-libs-3.54.0-0.1.hum1.s390x.rpm", "licenseDeclared": "blessing", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 1b85545bd9788c0a3344e71b57eab92b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sqlite-libs@3.54.0-0.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sqlite-s390x", "name": "sqlite", "versionInfo": "3.54.0-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/s/sqlite-3.54.0-0.1.hum1.s390x.rpm", "licenseDeclared": "blessing", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 6aba27d62bb5ee8f2f9de380b93c12c3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sqlite@3.54.0-0.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sysprof-capture-devel-s390x", "name": "sysprof-capture-devel", "versionInfo": "51.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/s/sysprof-capture-devel-51.0-1.1.hum1.s390x.rpm", "licenseDeclared": "BSD-2-Clause-Patent", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 70219b5ff46fb9717484dc224e7add9b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sysprof-capture-devel@51.0-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-devel-s390x", "name": "systemd-devel", "versionInfo": "261.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/s/systemd-devel-261.2-1.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 4e4681d943273893e46623bfaaf85dfe"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-devel@261.2-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-libs-s390x", "name": "systemd-libs", "versionInfo": "261.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/s/systemd-libs-261.2-1.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 14d7c8a2c8d2cc685ec1cc68ec48f362"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-libs@261.2-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-rpm-macros-s390x", "name": "systemd-rpm-macros", "versionInfo": "261.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/s/systemd-rpm-macros-261.2-1.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 52980d5eb7674cf6c5b0730b0095a2a4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-rpm-macros@261.2-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-shared-s390x", "name": "systemd-shared", "versionInfo": "261.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/s/systemd-shared-261.2-1.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 9e182e8a3bf65f5b7a208c832636ad23"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-shared@261.2-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-standalone-sysusers-s390x", "name": "systemd-standalone-sysusers", "versionInfo": "261.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/s/systemd-standalone-sysusers-261.2-1.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: fc09344446758e6866599a31399d3bf6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-standalone-sysusers@261.2-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-s390x", "name": "systemd", "versionInfo": "261.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/s/systemd-261.2-1.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 86dbc83688ff04ed8686ec78aabf963d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd@261.2-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tar-s390x", "name": "tar", "versionInfo": "2:1.35-10.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/t/tar-1.35-10.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: d20eece15535d831172af71cb77a0e0b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tar@1.35-10.1.hum1?arch=s390x&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tpm2-tss-s390x", "name": "tpm2-tss", "versionInfo": "4.2.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/t/tpm2-tss-4.2.0-1.1.hum1.s390x.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 4bcba63ab39f593aa7e78024866aa12a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tpm2-tss@4.2.0-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tree-sitter-srpm-macros-s390x", "name": "tree-sitter-srpm-macros", "versionInfo": "0.4.6-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/t/tree-sitter-srpm-macros-0.4.6-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: f65af17df28df341ec383338fcc47481"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tree-sitter-srpm-macros@0.4.6-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tzdata-s390x", "name": "tzdata", "versionInfo": "2026e-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/t/tzdata-2026e-1.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain AND (GPL-2.0-only WITH ClassPath-exception-2.0)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: a1336045dee9a14e5ecb98f2e75ca023"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tzdata@2026e-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-unzip-s390x", "name": "unzip", "versionInfo": "6.0-71.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/u/unzip-6.0-71.1.hum1.s390x.rpm", "licenseDeclared": "Info-ZIP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 720c2a47a1797b3214555554c2a79ef4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/unzip@6.0-71.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-util-linux-core-s390x", "name": "util-linux-core", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/u/util-linux-core-2.42.4-2.1.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 81ead8c15499d8e676405f12bae9face"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/util-linux-core@2.42.4-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-util-linux-s390x", "name": "util-linux", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/u/util-linux-2.42.4-2.1.hum1.s390x.rpm", "licenseDeclared": "GPL-1.0-or-later AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: da08fb9caf18b27ad4cd85f3492e9c9b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/util-linux@2.42.4-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-which-s390x", "name": "which", "versionInfo": "2.25-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/w/which-2.25-2.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 3faab74931530d51d59f9962eae4497b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/which@2.25-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xxhash-libs-s390x", "name": "xxhash-libs", "versionInfo": "0.8.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/x/xxhash-libs-0.8.4-1.1.hum1.s390x.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: ce696abcca56a465f23950d9d2b33ec8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xxhash-libs@0.8.4-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xz-libs-s390x", "name": "xz-libs", "versionInfo": "1:5.8.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/x/xz-libs-5.8.4-1.1.hum1.s390x.rpm", "licenseDeclared": "0BSD", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: dc5c19c8e60d04be2ff9e2f05b78bd2d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xz-libs@5.8.4-1.1.hum1?arch=s390x&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xz-s390x", "name": "xz", "versionInfo": "1:5.8.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/x/xz-5.8.4-1.1.hum1.s390x.rpm", "licenseDeclared": "0BSD AND GPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 766bb2c2f42616c8be4d5353b1827d69"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xz@5.8.4-1.1.hum1?arch=s390x&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zig-srpm-macros-s390x", "name": "zig-srpm-macros", "versionInfo": "1-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/z/zig-srpm-macros-1-9.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 0c226eb1fa4d5fc3d272055b6397b077"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zig-srpm-macros@1-9.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zip-s390x", "name": "zip", "versionInfo": "3.0-46.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/z/zip-3.0-46.1.hum1.s390x.rpm", "licenseDeclared": "Info-ZIP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: dabbcab97059c98ec49498b32e779b01"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zip@3.0-46.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zlib-ng-compat-devel-s390x", "name": "zlib-ng-compat-devel", "versionInfo": "2.3.3-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/z/zlib-ng-compat-devel-2.3.3-6.1.hum1.s390x.rpm", "licenseDeclared": "Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: a197ca9b5d2d747b47c66d28839fbcf6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zlib-ng-compat-devel@2.3.3-6.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zlib-ng-compat-s390x", "name": "zlib-ng-compat", "versionInfo": "2.3.3-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/z/zlib-ng-compat-2.3.3-6.1.hum1.s390x.rpm", "licenseDeclared": "Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: ccb3116e066283f3ac05000db321a028"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zlib-ng-compat@2.3.3-6.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zstd-s390x", "name": "zstd", "versionInfo": "1.5.7-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/z/zstd-1.5.7-6.2.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 3344acb0ce44f331ff2d587cab1596a7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zstd@1.5.7-6.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-buildah-x86-64", "name": "buildah-buildroot-x86_64", "versionInfo": "77531cad", "downloadLocation": "NOASSERTION", "filesAnalyzed": false}, {"SPDXID": "SPDXRef-Buildroot-Package-R-srpm-macros-x86-64", "name": "R-srpm-macros", "versionInfo": "1.3.7-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/R-srpm-macros-1.3.7-3.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: af95299e83e51b62a40fa7a42d357077"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/R-srpm-macros@1.3.7-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-add-determinism-x86-64", "name": "add-determinism", "versionInfo": "0.7.3-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/add-determinism-0.7.3-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND MIT AND Unicode-DFS-2016 AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 OR MIT) AND (Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND (MIT OR Zlib OR Apache-2.0) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 02acf5d1809fd4e81f704e1d95ed7b89"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/add-determinism@0.7.3-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-alternatives-x86-64", "name": "alternatives", "versionInfo": "1.33-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/alternatives-1.33-6.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 5eb4df30f945eef277e2acb1c5b781e6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/alternatives@1.33-6.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-annobin-docs-x86-64", "name": "annobin-docs", "versionInfo": "13.32-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/annobin-docs-13.32-1.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND GFDL-1.3-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 18d60a72e7a0be13693c92c6e0d885c9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/annobin-docs@13.32-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-annobin-plugin-gcc-x86-64", "name": "annobin-plugin-gcc", "versionInfo": "13.32-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/annobin-plugin-gcc-13.32-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND GFDL-1.3-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: d91069c827cea6f3d733bf2670282118"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/annobin-plugin-gcc@13.32-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ansible-srpm-macros-x86-64", "name": "ansible-srpm-macros", "versionInfo": "1-22.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/ansible-srpm-macros-1-22.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 6343ff368e5236625d015dbc91e70769"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ansible-srpm-macros@1-22.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-audit-libs-x86-64", "name": "audit-libs", "versionInfo": "4.2.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/audit-libs-4.2.1-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: ec3ac4d4c3901cbd76eb9447ca97e720"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/audit-libs@4.2.1-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-authselect-libs-x86-64", "name": "authselect-libs", "versionInfo": "1.8.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/authselect-libs-1.8.0-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 9b5540710a6bfe0c785d76bb9a842134"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/authselect-libs@1.8.0-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-authselect-x86-64", "name": "authselect", "versionInfo": "1.8.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/authselect-1.8.0-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 6092d53085d7e00bcb2f0006a4396cd9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/authselect@1.8.0-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bash-x86-64", "name": "bash", "versionInfo": "5.3.20-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/bash-5.3.20-1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 86fbd5cdc1fc9f73c5a80a184759cf26"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bash@5.3.20-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-binutils-x86-64", "name": "binutils", "versionInfo": "2.46.1-1.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/binutils-2.46.1-1.3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-3.0-or-later WITH Bison-exception-2.2) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND BSD-3-Clause AND GFDL-1.3-or-later AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 0cb0be3177bcc257fc8f1326ec6f3142"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/binutils@2.46.1-1.3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-btrfs-progs-devel-x86-64", "name": "btrfs-progs-devel", "versionInfo": "7.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/btrfs-progs-devel-7.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-only and LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 1d882f42c75e7ccc255e8a9051f6b7e8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/btrfs-progs-devel@7.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-btrfs-progs-x86-64", "name": "btrfs-progs", "versionInfo": "7.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/btrfs-progs-7.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 18b9c7731181dc7dca65a3f35d49be9b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/btrfs-progs@7.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-build-reproducibility-srpm-macros-x86-64", "name": "build-reproducibility-srpm-macros", "versionInfo": "0.7.3-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/build-reproducibility-srpm-macros-0.7.3-3.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 4dea8bdbe97b4534f60d8a6d0b9c793c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/build-reproducibility-srpm-macros@0.7.3-3.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bzip2-libs-x86-64", "name": "bzip2-libs", "versionInfo": "1.0.8-24.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/bzip2-libs-1.0.8-24.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-4-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 3d0299d5f7edb1ddf3d7737a8b344bca"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bzip2-libs@1.0.8-24.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bzip2-x86-64", "name": "bzip2", "versionInfo": "1.0.8-24.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/bzip2-1.0.8-24.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-4-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 25ceddb521c14cc7bc826c0ec6640adc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bzip2@1.0.8-24.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ca-certificates-x86-64", "name": "ca-certificates", "versionInfo": "2026.2.90_v9.0.317-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/ca-certificates-2026.2.90_v9.0.317-1.1.hum1.noarch.rpm", "licenseDeclared": "MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: a195cd97c3daf258791a89c2b5af39d2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ca-certificates@2026.2.90_v9.0.317-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cmake-filesystem-x86-64", "name": "cmake-filesystem", "versionInfo": "4.3.0-5.6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/cmake-filesystem-4.3.0-5.6.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND MIT-open-group AND Zlib AND Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: d4e233a661a24a36e3332c0b980da22c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cmake-filesystem@4.3.0-5.6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cmake-srpm-macros-x86-64", "name": "cmake-srpm-macros", "versionInfo": "4.3.0-5.6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/cmake-srpm-macros-4.3.0-5.6.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND MIT-open-group AND Zlib AND Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: e2f14e03350d92477884a522df888c53"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cmake-srpm-macros@4.3.0-5.6.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-coreutils-common-x86-64", "name": "coreutils-common", "versionInfo": "9.12-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/coreutils-common-9.12-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-no-invariants-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 07e605a0b418cccac841adc20aa4ba1c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/coreutils-common@9.12-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-coreutils-x86-64", "name": "coreutils", "versionInfo": "9.12-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/coreutils-9.12-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-no-invariants-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: ebcb432638b4811a1b7f8f89f4aff370"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/coreutils@9.12-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cpio-x86-64", "name": "cpio", "versionInfo": "2.15-10.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/cpio-2.15-10.2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 464bcd9ea807329681bc82904f3c89ca"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cpio@2.15-10.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cpp-x86-64", "name": "cpp", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/cpp-16.2.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 6155d5751aec01ed71d09c9f8e94551e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cpp@16.2.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cracklib-x86-64", "name": "cracklib", "versionInfo": "2.10.3-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/cracklib-2.10.3-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 8d59dc88fa43506d354139ab7acbb0a4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cracklib@2.10.3-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-crypto-policies-config-default-x86-64", "name": "crypto-policies-config-default", "versionInfo": "20260812-1.git359ab16.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/crypto-policies-config-default-20260812-1.git359ab16.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 1e6fce169a2973e4f665428cb52ae9ad"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/crypto-policies-config-default@20260812-1.git359ab16.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-crypto-policies-x86-64", "name": "crypto-policies", "versionInfo": "20260812-1.git359ab16.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/crypto-policies-20260812-1.git359ab16.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 9756d9b800cfeafa3f39e494328a620e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/crypto-policies@20260812-1.git359ab16.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-curl-x86-64", "name": "curl", "versionInfo": "8.22.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/curl-8.22.0-1.1.hum1.x86_64.rpm", "licenseDeclared": "curl", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 780e451ae2b4d6a094306b9aaa666887"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/curl@8.22.0-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cyrus-sasl-lib-x86-64", "name": "cyrus-sasl-lib", "versionInfo": "2.1.28-37.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/cyrus-sasl-lib-2.1.28-37.2.hum1.x86_64.rpm", "licenseDeclared": "BSD-Attribution-HPND-disclaimer", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 7010d12ef8d1784c80154ffb153fba63"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cyrus-sasl-lib@2.1.28-37.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-debugedit-x86-64", "name": "debugedit", "versionInfo": "5.3-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/d/debugedit-5.3-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 2ce506d8cc0cffd0a8e4d0c5f0f936d6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/debugedit@5.3-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-device-mapper-devel-x86-64", "name": "device-mapper-devel", "versionInfo": "1.02.217-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/d/device-mapper-devel-1.02.217-1.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 382b37c35a7b25342b4e55213ec246c8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/device-mapper-devel@1.02.217-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-device-mapper-libs-x86-64", "name": "device-mapper-libs", "versionInfo": "1.02.217-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/d/device-mapper-libs-1.02.217-1.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: f097bb2c71796e4d5fe8b305624dd321"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/device-mapper-libs@1.02.217-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-device-mapper-x86-64", "name": "device-mapper", "versionInfo": "1.02.217-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/d/device-mapper-1.02.217-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: d9e37bc31c89867ad77bb490fa96914c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/device-mapper@1.02.217-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-diffutils-x86-64", "name": "diffutils", "versionInfo": "3.12-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/d/diffutils-3.12-6.2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 8c6951e4fcdf1695f6eb9e6ef74730c8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/diffutils@3.12-6.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-dwz-x86-64", "name": "dwz", "versionInfo": "0.17-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/d/dwz-0.17-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND GPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 9c4561353d076cd4b1556d806d46c8c4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/dwz@0.17-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-e2fsprogs-libs-x86-64", "name": "e2fsprogs-libs", "versionInfo": "1.47.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/e2fsprogs-libs-1.47.4-2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-only AND LGPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 1c5c8bda8a7a6b3aec51c99f9e1a5318"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/e2fsprogs-libs@1.47.4-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ed-x86-64", "name": "ed", "versionInfo": "1.22.6-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/ed-1.22.6-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-only AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: a4e85b35383423885ebd21b77bba6170"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ed@1.22.6-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-efi-srpm-macros-x86-64", "name": "efi-srpm-macros", "versionInfo": "6-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/efi-srpm-macros-6-9.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: cba49c2554beb37df9cc6bb744737e2b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/efi-srpm-macros@6-9.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-debuginfod-client-x86-64", "name": "elfutils-debuginfod-client", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/elfutils-debuginfod-client-0.196-1.1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-2.0-or-later OR LGPL-3.0-or-later)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: c6950ee47cabdbb447dd12e8f11ce2ec"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-debuginfod-client@0.196-1.1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-libelf-x86-64", "name": "elfutils-libelf", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/elfutils-libelf-0.196-1.1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 5fdb83b704a22368baf3ebd09ce19139"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-libelf@0.196-1.1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-libs-x86-64", "name": "elfutils-libs", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/elfutils-libs-0.196-1.1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: e1794cbfac97b414417c7c242229bf1c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-libs@0.196-1.1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-x86-64", "name": "elfutils", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/elfutils-0.196-1.1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-2.0-or-later OR LGPL-3.0-or-later) AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 085e3d859dfa30b810917353c33e9feb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils@0.196-1.1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-erlang-srpm-macros-x86-64", "name": "erlang-srpm-macros", "versionInfo": "0.3.11-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/erlang-srpm-macros-0.3.11-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 063020bc2b254fec865c06f313930cec"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/erlang-srpm-macros@0.3.11-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-expat-x86-64", "name": "expat", "versionInfo": "2.8.5-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/expat-2.8.5-1.2.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 0c5cbf6236a08bc929ff502c28ef9da1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/expat@2.8.5-1.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-file-libs-x86-64", "name": "file-libs", "versionInfo": "5.48-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/file-libs-5.48-3.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause-Darwin AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 693d8445c4e52df1e5fad8a746e3089b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/file-libs@5.48-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-filesystem-srpm-macros-x86-64", "name": "filesystem-srpm-macros", "versionInfo": "3.18-59.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/filesystem-srpm-macros-3.18-59.1.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: cff1a42588f4eb1a758735b668069a67"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/filesystem-srpm-macros@3.18-59.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-filesystem-x86-64", "name": "filesystem", "versionInfo": "3.18-59.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/filesystem-3.18-59.1.hum1.x86_64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: a736f1c0487b505dd6c16ceaaeb3f0a4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/filesystem@3.18-59.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-file-x86-64", "name": "file", "versionInfo": "5.48-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/file-5.48-3.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause-Darwin AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: fc18ee9b195bb0bef239935848f36eb0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/file@5.48-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-findutils-x86-64", "name": "findutils", "versionInfo": "1:4.11.0-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/findutils-4.11.0-2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: a6ab9adb99798fd43e71b67daa2fe8b8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/findutils@4.11.0-2.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-fonts-srpm-macros-x86-64", "name": "fonts-srpm-macros", "versionInfo": "1:5.0.0-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/fonts-srpm-macros-5.0.0-4.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 72e451571f24737949a256d091508d0c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/fonts-srpm-macros@5.0.0-4.hum1?arch=noarch&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-forge-srpm-macros-x86-64", "name": "forge-srpm-macros", "versionInfo": "0.4.0-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/forge-srpm-macros-0.4.0-5.hum1.noarch.rpm", "licenseDeclared": "GPL-1.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: bfbed65969ec708556df3750591a377d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/forge-srpm-macros@0.4.0-5.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-fpc-srpm-macros-x86-64", "name": "fpc-srpm-macros", "versionInfo": "1.3-17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/fpc-srpm-macros-1.3-17.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 1f7e4cb902ccc37236f8d34ff8873cf2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/fpc-srpm-macros@1.3-17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gap-srpm-macros-x86-64", "name": "gap-srpm-macros", "versionInfo": "2-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gap-srpm-macros-2-3.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 70e3423696085d13791fefc0be7cdf15"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gap-srpm-macros@2-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gawk-x86-64", "name": "gawk", "versionInfo": "5.4.1-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gawk-5.4.1-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: cfea5a78989dd66244218dbc0c6c0ba4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gawk@5.4.1-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gcc-plugin-annobin-x86-64", "name": "gcc-plugin-annobin", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gcc-plugin-annobin-16.2.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: f2b83ae39c4c6509f801b0c8b2dd22b6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gcc-plugin-annobin@16.2.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gcc-x86-64", "name": "gcc", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gcc-16.2.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: f9ac343d0c30d96195e02f2b54883446"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gcc@16.2.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gdb-minimal-x86-64", "name": "gdb-minimal", "versionInfo": "17.2-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gdb-minimal-17.2-6.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND BSD-3-Clause AND FSFAP AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain AND GFDL-1.3-or-later AND LGPL-2.0-or-later WITH GCC-exception-2.0 AND GPL-3.0-or-later WITH GCC-exception-3.1 AND GPL-2.0-or-later WITH GNU-compiler-exception AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: eecc3642be0c160e16f5cf1569b8f3fd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gdb-minimal@17.2-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gdbm-libs-x86-64", "name": "gdbm-libs", "versionInfo": "1:1.26-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gdbm-libs-1.26-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 1d2adcfbc7a8c3d3e29e56db4d441037"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gdbm-libs@1.26-1.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ghc-srpm-macros-x86-64", "name": "ghc-srpm-macros", "versionInfo": "1.10-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/ghc-srpm-macros-1.10-2.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: c59363c566e4f370953f5f4b048e594e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ghc-srpm-macros@1.10-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-git-core-x86-64", "name": "git-core", "versionInfo": "2.56.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/git-core-2.56.0-1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-only AND GPL-2.0-or-later AND LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: de69a6689606729abb30ea4325c33fe6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/git-core@2.56.0-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glib2-devel-x86-64", "name": "glib2-devel", "versionInfo": "2.90.1-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glib2-devel-2.90.1-1.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: ad5348f02520109c25a3c3d7643b9556"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glib2-devel@2.90.1-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glib2-x86-64", "name": "glib2", "versionInfo": "2.90.1-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glib2-2.90.1-1.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 0b2b57e4101d2c1fcd8a1cef23ee0c72"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glib2@2.90.1-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-common-x86-64", "name": "glibc-common", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-common-2.43-9.2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 9eab516d0f80b295960361b63b319245"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-common@2.43-9.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-devel-x86-64", "name": "glibc-devel", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-devel-2.43-9.2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 4ab96fa4ca1a669a0d850091bdd89486"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-devel@2.43-9.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-gconv-extra-x86-64", "name": "glibc-gconv-extra", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-gconv-extra-2.43-9.2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: eaeef60b7dbad9934cccc55d1dd62c80"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-gconv-extra@2.43-9.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-minimal-langpack-x86-64", "name": "glibc-minimal-langpack", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-minimal-langpack-2.43-9.2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 9d9998236922ccfdf80f9cbfa061931a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-minimal-langpack@2.43-9.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-static-x86-64", "name": "glibc-static", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-static-2.43-9.2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: b53bc257ae820dedddcad71092d88fda"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-static@2.43-9.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-x86-64", "name": "glibc", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-2.43-9.2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 41c73a734782d852fc7481d7fbd4130a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc@2.43-9.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gmp-x86-64", "name": "gmp", "versionInfo": "1:6.3.0-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gmp-6.3.0-6.1.hum1.x86_64.rpm", "licenseDeclared": "(LGPL-3.0-or-later OR GPL-2.0-or-later OR (LGPL-3.0-or-later AND GPL-2.0-or-later)) AND GFDL-1.3-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 2c7e7fb43e049cf045044f4d5bcf6fb1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gmp@6.3.0-6.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnat-srpm-macros-x86-64", "name": "gnat-srpm-macros", "versionInfo": "7-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnat-srpm-macros-7-3.hum1.noarch.rpm", "licenseDeclared": "FSFAP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 66efb6ab04e5e1a84478a688e2f149a3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnat-srpm-macros@7-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnome-srpm-macros-x86-64", "name": "gnome-srpm-macros", "versionInfo": "1.0-1.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/updates/44/Everything/x86_64/Packages/g/gnome-srpm-macros-1.0-1.fc44.noarch.rpm", "licenseDeclared": "Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 2bbaa6afcb861d76b0036e4b5bf9b3be"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnome-srpm-macros@1.0-1.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnulib-l10n-x86-64", "name": "gnulib-l10n", "versionInfo": "20241231-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnulib-l10n-20241231-4.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 5628836ab4d4e824bcadb20d87a01a33"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnulib-l10n@20241231-4.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-dirmngr-x86-64", "name": "gnupg2-dirmngr", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-dirmngr-2.4.9-18.2.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 64faf73544d16702ac4caeaed331a9de"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-dirmngr@2.4.9-18.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-gpg-agent-x86-64", "name": "gnupg2-gpg-agent", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-gpg-agent-2.4.9-18.2.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 9546299c3fa6e253822bbb48b47564a9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-gpg-agent@2.4.9-18.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-gpgconf-x86-64", "name": "gnupg2-gpgconf", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-gpgconf-2.4.9-18.2.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 017d50061482f5af2a52687e6bfeeded"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-gpgconf@2.4.9-18.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-keyboxd-x86-64", "name": "gnupg2-keyboxd", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-keyboxd-2.4.9-18.2.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: bb774c82d733bb4b5bcacbcfcc136a0d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-keyboxd@2.4.9-18.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-verify-x86-64", "name": "gnupg2-verify", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-verify-2.4.9-18.2.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 0b9ed17086f9631984af7ad0b65ed7be"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-verify@2.4.9-18.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-x86-64", "name": "gnupg2", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-2.4.9-18.2.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 8ed8d266f88c4e5d1ddc093f83220a2b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2@2.4.9-18.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnutls-x86-64", "name": "gnutls", "versionInfo": "3.8.13-5.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnutls-3.8.13-5.2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: dfbbb8930398b4570e1f04b3cecbce3d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnutls@3.8.13-5.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-filesystem-x86-64", "name": "go-filesystem", "versionInfo": "3.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/go-filesystem-3.8.0-3.hum1.x86_64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: b7ba053e6fc52967827728a4a06c6592"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-filesystem@3.8.0-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-rpm-macros-x86-64", "name": "go-rpm-macros", "versionInfo": "3.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/go-rpm-macros-3.8.0-3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 9ee7b1a24cd488ecf4304dfe6dbedc8f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-rpm-macros@3.8.0-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-srpm-macros-x86-64", "name": "go-srpm-macros", "versionInfo": "3.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/go-srpm-macros-3.8.0-3.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 58fd7d8eb056ce7d09e3ba375de1effc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-srpm-macros@3.8.0-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-bin-x86-64", "name": "golang1.27-bin", "versionInfo": "1.27.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/golang1.27-bin-1.27.2-1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 84db6ae4111d3f6c9e8df671e8262bfb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27-bin@1.27.2-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-src-x86-64", "name": "golang1.27-src", "versionInfo": "1.27.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/golang1.27-src-1.27.2-1.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: f40c9e87cab011209fed012b75f85d64"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27-src@1.27.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-x86-64", "name": "golang1.27", "versionInfo": "1.27.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/golang1.27-1.27.2-1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 1eee2e5d533071fcc5026d61d8a8babd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27@1.27.2-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golist-x86-64", "name": "golist", "versionInfo": "0.11.0-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/golist-0.11.0-2.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause AND BSD-3-Clause AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: c94866cb8a1c5c8a4f2192fce2ae701f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golist@0.11.0-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gpgme-devel-x86-64", "name": "gpgme-devel", "versionInfo": "2.0.1-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gpgme-devel-2.0.1-6.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 81aac372e18945d12cbaeb60f4ec5b86"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gpgme-devel@2.0.1-6.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gpgme-x86-64", "name": "gpgme", "versionInfo": "2.0.1-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gpgme-2.0.1-6.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: a708618724c42fb1e7303ca1204deef6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gpgme@2.0.1-6.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gpgverify-x86-64", "name": "gpgverify", "versionInfo": "2.2-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gpgverify-2.2-5.hum1.noarch.rpm", "licenseDeclared": "Boehm-GC", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 9637bdca60814388d4c5b144d923e6d4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gpgverify@2.2-5.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-grep-x86-64", "name": "grep", "versionInfo": "3.12-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/grep-3.12-4.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 30caafcf9e86d9e314469049d27a486b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/grep@3.12-4.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gzip-x86-64", "name": "gzip", "versionInfo": "1.15-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gzip-1.15-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 5a6149f1ac63b8ec9f2138279c7f179b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gzip@1.15-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-gpg-keys-x86-64", "name": "hummingbird-gpg-keys", "versionInfo": "20251124-1.17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/h/hummingbird-gpg-keys-20251124-1.17.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 01a73721cc0ecdcb5d9f3929f6777157"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-gpg-keys@20251124-1.17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-release-x86-64", "name": "hummingbird-release", "versionInfo": "20251124-1.17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/h/hummingbird-release-20251124-1.17.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: d1c993eba75002797ea72c3cd1266853"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-release@20251124-1.17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-repos-x86-64", "name": "hummingbird-repos", "versionInfo": "20251124-1.17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/h/hummingbird-repos-20251124-1.17.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 1704eb0434ddab68e1c756070246f576"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-repos@20251124-1.17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ima-evm-utils-libs-x86-64", "name": "ima-evm-utils-libs", "versionInfo": "1.6.2-12.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/i/ima-evm-utils-libs-1.6.2-12.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 3f7e9a8fa123cd5e5ea89cf63473c45e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ima-evm-utils-libs@1.6.2-12.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-info-x86-64", "name": "info", "versionInfo": "7.2-9.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/i/info-7.2-9.fc44.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 7cd06c9116234e26a968b1c2ff5be47d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/info@7.2-9.fc44?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-jansson-x86-64", "name": "jansson", "versionInfo": "2.14-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/jansson-2.14-5.1.hum1.x86_64.rpm", "licenseDeclared": "MIT AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: c1e4d44f64c047944dc31b1692a1e5b1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/jansson@2.14-5.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-java-srpm-macros-x86-64", "name": "java-srpm-macros", "versionInfo": "1-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/java-srpm-macros-1-9.hum1.noarch.rpm", "licenseDeclared": "MIT-0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 367fafb59cbd6a02034ba8bafdafe9c9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/java-srpm-macros@1-9.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-json-c-x86-64", "name": "json-c", "versionInfo": "0.18-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/json-c-0.18-9.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 6fec8b09fc93d23dba88f03b024fb073"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/json-c@0.18-9.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-kernel-headers-x86-64", "name": "kernel-headers", "versionInfo": "7.2.0-61.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/k/kernel-headers-7.2.0-61.1.hum1.x86_64.rpm", "licenseDeclared": "((GPL-2.0-only WITH Linux-syscall-note) OR BSD-2-Clause) AND ((GPL-2.0-only WITH Linux-syscall-note) OR BSD-3-Clause) AND ((GPL-2.0-only WITH Linux-syscall-note) OR CDDL-1.0) AND ((GPL-2.0-only WITH Linux-syscall-note) OR Linux-OpenIB) AND ((GPL-2.0-only WITH Linux-syscall-note) OR MIT) AND ((GPL-2.0-or-later WITH Linux-syscall-note) OR BSD-3-Clause) AND ((GPL-2.0-or-later WITH Linux-syscall-note) OR MIT) AND BSD-3-Clause AND (GPL-1.0-or-later WITH Linux-syscall-note) AND GPL-2.0-only AND (GPL-2.0-only WITH Linux-syscall-note) AND (GPL-2.0-or-later WITH Linux-syscall-note) AND (LGPL-2.0-or-later WITH Linux-syscall-note) AND (LGPL-2.1-only WITH Linux-syscall-note) AND (LGPL-2.1-or-later WITH Linux-syscall-note) AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: aadfdd0580fde87fc9b34360fb82a469"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/kernel-headers@7.2.0-61.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-kernel-srpm-macros-x86-64", "name": "kernel-srpm-macros", "versionInfo": "1.0-30.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/k/kernel-srpm-macros-1.0-30.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: d6fe851b8eed59b0b3ed90411974a3f1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/kernel-srpm-macros@1.0-30.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-keyutils-libs-x86-64", "name": "keyutils-libs", "versionInfo": "1.6.3-8.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/k/keyutils-libs-1.6.3-8.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 83cd2236fb6d56defe7beca1256cca78"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/keyutils-libs@1.6.3-8.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-krb5-libs-x86-64", "name": "krb5-libs", "versionInfo": "1.22.2-10.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/k/krb5-libs-1.22.2-10.3.hum1.x86_64.rpm", "licenseDeclared": "Brian-Gladman-2-Clause AND BSD-2-Clause AND (BSD-2-Clause OR GPL-2.0-or-later) AND BSD-2-Clause-first-lines AND BSD-3-Clause AND BSD-4-Clause AND CMU-Mach-nodoc AND FSFULLRWD AND HPND AND HPND-export2-US AND HPND-export-US AND HPND-export-US-acknowledgement AND HPND-export-US-modify AND ISC AND MIT AND MIT-CMU AND OLDAP-2.8 AND OpenVision", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 545278e10134666a8c291499bac221f1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/krb5-libs@1.22.2-10.3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-less-x86-64", "name": "less", "versionInfo": "710-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/less-710-1.1.hum1.x86_64.rpm", "licenseDeclared": "(GPL-3.0-only OR BSD-2-Clause) AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: e3a54a41aea41bcbcfb92317e757f590"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/less@710-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libacl-x86-64", "name": "libacl", "versionInfo": "2.4.0-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libacl-2.4.0-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 788fb6fac6ab4116feaef2e0300ea57e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libacl@2.4.0-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libarchive-x86-64", "name": "libarchive", "versionInfo": "3.8.9-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libarchive-3.8.9-2.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause AND FSFULLR AND GPL-2.0-or-later WITH Libtool-exception AND BSD-3-Clause AND FSFUL", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: aad0303990bb1b04a5105825aeaf3001"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libarchive@3.8.9-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libassuan-devel-x86-64", "name": "libassuan-devel", "versionInfo": "2.5.7-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libassuan-devel-2.5.7-6.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 18d51a5203cf409f5879929162bda02c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libassuan-devel@2.5.7-6.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libassuan-x86-64", "name": "libassuan", "versionInfo": "2.5.7-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libassuan-2.5.7-6.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 059b8af761f036d632500cc22cec31e6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libassuan@2.5.7-6.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libatomic-x86-64", "name": "libatomic", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libatomic-16.2.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 47ab6b5acecd7d6ae9a3eb6615e15c91"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libatomic@16.2.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libattr-x86-64", "name": "libattr", "versionInfo": "2.6.0-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libattr-2.6.0-9.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: d585f6a64162151c857c9401a1cbf3e0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libattr@2.6.0-9.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libblkid-devel-x86-64", "name": "libblkid-devel", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libblkid-devel-2.42.4-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: d4ec8adb20951ee10d3ba282422910dd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libblkid-devel@2.42.4-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libblkid-x86-64", "name": "libblkid", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libblkid-2.42.4-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: c88859e9e7d00ebc2e15e6b98baf950d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libblkid@2.42.4-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libbrotli-x86-64", "name": "libbrotli", "versionInfo": "1.2.0-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libbrotli-1.2.0-6.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 85f2f47512d9d8f986fb8a1c04cc5aa6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libbrotli@1.2.0-6.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libbtrfsutil-x86-64", "name": "libbtrfsutil", "versionInfo": "7.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libbtrfsutil-7.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 2f8e4fa8e785ffdbf154d7229f3c0cf3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libbtrfsutil@7.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libbtrfs-x86-64", "name": "libbtrfs", "versionInfo": "7.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libbtrfs-7.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: a60db038432fdcc16165f3b8c35ae133"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libbtrfs@7.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcap-ng-x86-64", "name": "libcap-ng", "versionInfo": "0.9.6-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcap-ng-0.9.6-1.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 5fd3db66052d3df8f713e523c13a955f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcap-ng@0.9.6-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcap-x86-64", "name": "libcap", "versionInfo": "2.78-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcap-2.78-2.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 67f4e2e447638ef6423ec37215870ea1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcap@2.78-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcbor-x86-64", "name": "libcbor", "versionInfo": "0.14.0-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcbor-0.14.0-3.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 9a33095c506ec5bd6d7c3b525cef087a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcbor@0.14.0-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcom-err-x86-64", "name": "libcom_err", "versionInfo": "1.47.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcom_err-1.47.4-2.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: e24ccc4e4b721fc269fa4ded6adba3be"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcom_err@1.47.4-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcurl-x86-64", "name": "libcurl", "versionInfo": "8.22.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcurl-8.22.0-1.1.hum1.x86_64.rpm", "licenseDeclared": "curl", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 1428e163e746597d1e33a36f58c93680"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcurl@8.22.0-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libeconf-x86-64", "name": "libeconf", "versionInfo": "0.7.9-4.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libeconf-0.7.9-4.2.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 1ccc14f8674aec8c899ee0eeded54f81"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libeconf@0.7.9-4.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libedit-x86-64", "name": "libedit", "versionInfo": "3.1-60.20260512cvs.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libedit-3.1-60.20260512cvs.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND BSD-2-Clause AND ISC", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: b43a3ffa99a04c39a05eddf196a601b7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libedit@3.1-60.20260512cvs.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libevent-x86-64", "name": "libevent", "versionInfo": "2.1.13-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libevent-2.1.13-1.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND ISC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: f30ba9b3193b576be7b3da4364c75e55"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libevent@2.1.13-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfdisk-x86-64", "name": "libfdisk", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libfdisk-2.42.4-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: bed12a724f795ae4a0f119dd179dd169"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfdisk@2.42.4-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libffi-devel-x86-64", "name": "libffi-devel", "versionInfo": "3.8.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libffi-devel-3.8.0-1.1.hum1.x86_64.rpm", "licenseDeclared": "MIT AND CC-PDDC AND (GPL-3.0-or-later WITH Texinfo-exception)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 2d9b902907430d9a7ab2618eb14232f8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libffi-devel@3.8.0-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libffi-x86-64", "name": "libffi", "versionInfo": "3.8.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libffi-3.8.0-1.1.hum1.x86_64.rpm", "licenseDeclared": "MIT AND CC-PDDC AND (GPL-3.0-or-later WITH Texinfo-exception)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: bfcd0557f6f7d71f78389a2f255f84ee"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libffi@3.8.0-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfido2-x86-64", "name": "libfido2", "versionInfo": "1.17.0-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libfido2-1.17.0-6.2.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 8b9b7eff333cbda55fa9d7d24667f672"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfido2@1.17.0-6.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfsverity-x86-64", "name": "libfsverity", "versionInfo": "1.7-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libfsverity-1.7-4.1.hum1.x86_64.rpm", "licenseDeclared": "NOASSERTION", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 372c392dc177e9b4587046fed56f0d6e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfsverity@1.7-4.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgcc-x86-64", "name": "libgcc", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libgcc-16.2.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: d9f9b38741e47aa97fa57d4394c05e85"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgcc@16.2.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgcrypt-x86-64", "name": "libgcrypt", "versionInfo": "1.12.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libgcrypt-1.12.4-1.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND (BSD-3-Clause OR GPL-2.0-only) AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later AND MIT-Modern-Variant", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: f4bef4bc6a67ba46ac13e78047c07a4a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgcrypt@1.12.4-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgomp-x86-64", "name": "libgomp", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libgomp-16.2.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 9b500e97526ccc46e490b028b56ed8d7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgomp@16.2.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgpg-error-devel-x86-64", "name": "libgpg-error-devel", "versionInfo": "1.61-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libgpg-error-devel-1.61-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND (BSD-3-Clause OR LGPL-2.1-or-later) AND FSFULLR AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 228d01d0b3d6761ed4460576551061a0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgpg-error-devel@1.61-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgpg-error-x86-64", "name": "libgpg-error", "versionInfo": "1.61-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libgpg-error-1.61-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND (BSD-3-Clause OR LGPL-2.1-or-later) AND FSFULLR AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: b47f6024eae245a48d6413e5ea9ddd49"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgpg-error@1.61-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libidn2-x86-64", "name": "libidn2", "versionInfo": "2.3.8-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libidn2-2.3.8-4.1.hum1.x86_64.rpm", "licenseDeclared": "(GPL-2.0-or-later OR LGPL-3.0-or-later) AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 81f930e418fc54a1e008fa2b2ed09873"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libidn2@2.3.8-4.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libksba-x86-64", "name": "libksba", "versionInfo": "1.8.1-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libksba-1.8.1-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND (LGPL-3.0-or-later OR GPL-2.0-or-later)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 791730e4835155fab5a86f2022ad6df6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libksba@1.8.1-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-liblastlog2-x86-64", "name": "liblastlog2", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/liblastlog2-2.42.4-2.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 3cb1e0b98469b5d3d68474923c0d81f9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/liblastlog2@2.42.4-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libmount-devel-x86-64", "name": "libmount-devel", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libmount-devel-2.42.4-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: eaa43bfcd8b53553ae30ed72eac45aa8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libmount-devel@2.42.4-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libmount-x86-64", "name": "libmount", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libmount-2.42.4-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: d37fd9e0844a0a7a78353fbd66fdb31a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libmount@2.42.4-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libmpc-x86-64", "name": "libmpc", "versionInfo": "1.4.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libmpc-1.4.1-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-3.0-or-later AND FSFAP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: c553fb50a9da1707322efd91e91901fc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libmpc@1.4.1-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnghttp2-x86-64", "name": "libnghttp2", "versionInfo": "1.69.0-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libnghttp2-1.69.0-6.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 45fc7389fd2b921540a7531e83c70187"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnghttp2@1.69.0-6.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnghttp3-x86-64", "name": "libnghttp3", "versionInfo": "1.18.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libnghttp3-1.18.0-1.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: d4a67b9f63187cba69ee5cbf3881b097"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnghttp3@1.18.0-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnsl2-x86-64", "name": "libnsl2", "versionInfo": "2.0.1-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libnsl2-2.0.1-6.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 685476ac69b195887702e1c9441a4629"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnsl2@2.0.1-6.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpfm-x86-64", "name": "libpfm", "versionInfo": "4.13.0-20.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/updates/44/Everything/x86_64/Packages/l/libpfm-4.13.0-20.fc44.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 8d3340a34243fe94badf7ab91f89d20c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpfm@4.13.0-20.fc44?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpkgconf-x86-64", "name": "libpkgconf", "versionInfo": "2.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libpkgconf-2.5.1-2.1.hum1.x86_64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: e74fe8ab012b3d507ee094563d5cfc63"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpkgconf@2.5.1-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpsl-x86-64", "name": "libpsl", "versionInfo": "0.23.3-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libpsl-0.23.3-1.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 075540620d092a55ab448679a2415dee"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpsl@0.23.3-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpwquality-x86-64", "name": "libpwquality", "versionInfo": "1.4.5-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libpwquality-1.4.5-18.2.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 461b780054d2ddb36856589564a9e8a4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpwquality@1.4.5-18.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libseccomp-devel-x86-64", "name": "libseccomp-devel", "versionInfo": "2.6.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libseccomp-devel-2.6.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 40949633fb9e897133b0ac274a5b4ca3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libseccomp-devel@2.6.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libseccomp-static-x86-64", "name": "libseccomp-static", "versionInfo": "2.6.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libseccomp-static-2.6.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: ca699c451c7471916fa49f48b45e5396"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libseccomp-static@2.6.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libseccomp-x86-64", "name": "libseccomp", "versionInfo": "2.6.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libseccomp-2.6.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: e05ae8664f05c0598bf78dfe90e9c7bb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libseccomp@2.6.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libselinux-devel-x86-64", "name": "libselinux-devel", "versionInfo": "3.11-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libselinux-devel-3.11-5.1.hum1.x86_64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 7e5b9a565a2777a00f2bfeb1f458f962"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libselinux-devel@3.11-5.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libselinux-utils-x86-64", "name": "libselinux-utils", "versionInfo": "3.11-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libselinux-utils-3.11-5.1.hum1.x86_64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 2a10779a6db7dff145f6ad9849a537dd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libselinux-utils@3.11-5.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libselinux-x86-64", "name": "libselinux", "versionInfo": "3.11-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libselinux-3.11-5.1.hum1.x86_64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: df2dff5bcf4c74661cbdd8c7d8690c9d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libselinux@3.11-5.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsemanage-x86-64", "name": "libsemanage", "versionInfo": "3.11-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libsemanage-3.11-4.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: e315e8f4c05e9ff1a8550c96728143db"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsemanage@3.11-4.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsepol-devel-x86-64", "name": "libsepol-devel", "versionInfo": "3.11-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libsepol-devel-3.11-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 02359f55106a6db8d65fdcbd23487be2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsepol-devel@3.11-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsepol-x86-64", "name": "libsepol", "versionInfo": "3.11-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libsepol-3.11-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 22ccfb73f7b0fa00c7eea35897c331c3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsepol@3.11-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsmartcols-x86-64", "name": "libsmartcols", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libsmartcols-2.42.4-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 04a86365c7c38a3097c848d8a32de300"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsmartcols@2.42.4-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libssh-config-x86-64", "name": "libssh-config", "versionInfo": "0.12.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libssh-config-0.12.2-1.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: f26ba5abb68d2fea08f751a8569faa35"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libssh-config@0.12.2-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libssh-x86-64", "name": "libssh", "versionInfo": "0.12.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libssh-0.12.2-1.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 2a67c00b820489c0075d8475b6764b45"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libssh@0.12.2-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libstdc++-x86-64", "name": "libstdc++", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libstdc++-16.2.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 1d29dc0cf0b01c168d3f6f050c84311c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libstdc++@16.2.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtasn1-x86-64", "name": "libtasn1", "versionInfo": "4.21.0-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libtasn1-4.21.0-2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 1752b9dd0a834fca70607e8dea809765"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtasn1@4.21.0-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtirpc-x86-64", "name": "libtirpc", "versionInfo": "1.3.8-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libtirpc-1.3.8-0.1.hum1.x86_64.rpm", "licenseDeclared": "SISSL AND BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 652d74d6bf014bdb1b8fffbed3929fa8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtirpc@1.3.8-0.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtool-ltdl-x86-64", "name": "libtool-ltdl", "versionInfo": "2.6.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libtool-ltdl-2.6.2-1.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later WITH Libtool-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 4ed75e065e82bb447bc9e57a1108063e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtool-ltdl@2.6.2-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libunistring-x86-64", "name": "libunistring", "versionInfo": "1.1-12.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libunistring-1.1-12.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 58d6c066070b8ba39b68b8ce4475d903"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libunistring@1.1-12.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libusb1-x86-64", "name": "libusb1", "versionInfo": "1.0.30-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libusb1-1.0.30-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 3ed4be7f3910f98f9bf6a42d49b5de70"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libusb1@1.0.30-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libuuid-x86-64", "name": "libuuid", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libuuid-2.42.4-2.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 8c9afb13ed8e067848e0d260a5745c86"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libuuid@2.42.4-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libverto-x86-64", "name": "libverto", "versionInfo": "0.3.2-13.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libverto-0.3.2-13.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 5c04a48b08efca2f367581cf22f3ea79"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libverto@0.3.2-13.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxcrypt-devel-x86-64", "name": "libxcrypt-devel", "versionInfo": "4.5.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libxcrypt-devel-4.5.2-4.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND BSD-3-Clause AND BSD-2-Clause AND BSD-2-Clause-FreeBSD AND 0BSD AND CC0-1.0 AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: ccac5efc5f591f331023dbafda4d5a2f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxcrypt-devel@4.5.2-4.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxcrypt-static-x86-64", "name": "libxcrypt-static", "versionInfo": "4.5.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libxcrypt-static-4.5.2-4.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND BSD-3-Clause AND BSD-2-Clause AND BSD-2-Clause-FreeBSD AND 0BSD AND CC0-1.0 AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 9a5100ffd30b5b31e9c1f72e77055eee"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxcrypt-static@4.5.2-4.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxcrypt-x86-64", "name": "libxcrypt", "versionInfo": "4.5.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libxcrypt-4.5.2-4.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND BSD-3-Clause AND BSD-2-Clause AND BSD-2-Clause-FreeBSD AND 0BSD AND CC0-1.0 AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: b76c1e01a696f4ec876c524bbf9c21ae"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxcrypt@4.5.2-4.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxml2-16-x86-64", "name": "libxml2-16", "versionInfo": "2.15.4-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libxml2-16-2.15.4-1.2.hum1.x86_64.rpm", "licenseDeclared": "MIT AND ISC-Veillard AND W3C", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 9371c6f0a380cce6e0df9815a66b5fe3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxml2-16@2.15.4-1.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libzstd-x86-64", "name": "libzstd", "versionInfo": "1.5.7-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libzstd-1.5.7-6.2.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 4607fb5e4380e49438e2b427f64e4bfb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libzstd@1.5.7-6.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-linkdupes-x86-64", "name": "linkdupes", "versionInfo": "0.7.3-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/linkdupes-0.7.3-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND MIT AND Unicode-DFS-2016 AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND (MIT OR Zlib OR Apache-2.0) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 668820dd70e9efdcf45385d43d320ad1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/linkdupes@0.7.3-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lua-libs-x86-64", "name": "lua-libs", "versionInfo": "5.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/lua-libs-5.5.1-2.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 4d1425525334d76079fe029d8f56b187"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lua-libs@5.5.1-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lua-srpm-macros-x86-64", "name": "lua-srpm-macros", "versionInfo": "1-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/lua-srpm-macros-1-18.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 68293f00751e1bc423b0bb2ac4e21221"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lua-srpm-macros@1-18.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lz4-libs-x86-64", "name": "lz4-libs", "versionInfo": "1.10.0-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/lz4-libs-1.10.0-5.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: f75d082f9eb3ae2757600e466a1d67e8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lz4-libs@1.10.0-5.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lzo-x86-64", "name": "lzo", "versionInfo": "2.10-17.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/lzo-2.10-17.1.hum1.x86_64.rpm", "licenseDeclared": "gpl-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 1ca393012cab41c44ac333b01e9ab80d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lzo@2.10-17.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-make-x86-64", "name": "make", "versionInfo": "1:4.4.1-13.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/m/make-4.4.1-13.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND GFDL-1.3-or-later AND FSFULLR", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 27eaf91e39db926c37a2951709191977"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/make@4.4.1-13.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-meson-srpm-macros-x86-64", "name": "meson-srpm-macros", "versionInfo": "1.12.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/m/meson-srpm-macros-1.12.1-2.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 7617c98560a327b943961c400248f04b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/meson-srpm-macros@1.12.1-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-mpdecimal-x86-64", "name": "mpdecimal", "versionInfo": "4.0.1-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/m/mpdecimal-4.0.1-4.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 170c2028b47e6372d7f4a490d77e9578"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/mpdecimal@4.0.1-4.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-mpfr-x86-64", "name": "mpfr", "versionInfo": "4.2.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/m/mpfr-4.2.2-4.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: c8368e2d183100ea0a459e57de84fb6a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/mpfr@4.2.2-4.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ncurses-base-x86-64", "name": "ncurses-base", "versionInfo": "6.6-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/ncurses-base-6.6-3.1.hum1.noarch.rpm", "licenseDeclared": "MIT-open-group", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: a90d36a4f9603dffe4896cbc1c4c42c0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ncurses-base@6.6-3.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ncurses-libs-x86-64", "name": "ncurses-libs", "versionInfo": "6.6-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/ncurses-libs-6.6-3.1.hum1.x86_64.rpm", "licenseDeclared": "MIT-open-group", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 50f19d0d5fce318dd61f3bf284a61eb8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ncurses-libs@6.6-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-nettle-x86-64", "name": "nettle", "versionInfo": "4.0-5.5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/nettle-4.0-5.5.hum1.x86_64.rpm", "licenseDeclared": "LGPL-3.0-or-later OR GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 2732e0a3741ef414c34b156cda9d082b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/nettle@4.0-5.5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ngtcp2-crypto-ossl-x86-64", "name": "ngtcp2-crypto-ossl", "versionInfo": "1.22.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/ngtcp2-crypto-ossl-1.22.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: de381ae81e60f4844b4152a563a7edf1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ngtcp2-crypto-ossl@1.22.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ngtcp2-x86-64", "name": "ngtcp2", "versionInfo": "1.22.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/ngtcp2-1.22.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 83e5fdfe2265869feaadd36c14dd724c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ngtcp2@1.22.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-npth-x86-64", "name": "npth", "versionInfo": "1.8-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/npth-1.8-5.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 960ca5a1290fd8277e709962817f2d9b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/npth@1.8-5.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ocaml-srpm-macros-x86-64", "name": "ocaml-srpm-macros", "versionInfo": "11-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/ocaml-srpm-macros-11-4.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 6d563b597c552c5ce842bdd83b6d8dd1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ocaml-srpm-macros@11-4.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openblas-srpm-macros-x86-64", "name": "openblas-srpm-macros", "versionInfo": "2-23.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/openblas-srpm-macros-2-23.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: bf3a7ebbd05d3c09e9712e957b99d3b5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openblas-srpm-macros@2-23.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openldap-x86-64", "name": "openldap", "versionInfo": "2.6.15-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/openldap-2.6.15-1.1.hum1.x86_64.rpm", "licenseDeclared": "OLDAP-2.8", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 06f2c8cbb7e975fd13c4755c695ddeca"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openldap@2.6.15-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssh-clients-x86-64", "name": "openssh-clients", "versionInfo": "10.5p1-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/openssh-clients-10.5p1-1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND BSD-2-Clause AND ISC AND SSH-OpenSSH AND ssh-keyscan AND snprintf AND LicenseRef-Fedora-Public-Domain AND X11-distribute-modifications-variant", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 7f0eac36b584c1ac3c3a013843b25b5a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssh-clients@10.5p1-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssh-x86-64", "name": "openssh", "versionInfo": "10.5p1-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/openssh-10.5p1-1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND BSD-2-Clause AND ISC AND SSH-OpenSSH AND ssh-keyscan AND snprintf AND LicenseRef-Fedora-Public-Domain AND X11-distribute-modifications-variant", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 91347fe7a659d6abdbba22aa9684af78"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssh@10.5p1-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssl-fips-provider-upstream-x86-64", "name": "openssl-fips-provider-upstream", "versionInfo": "1:3.5.9-0.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/openssl-fips-provider-upstream-3.5.9-0.3.hum1.x86_64.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: f4f22195d0dd6fc38849c184a87fa7da"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssl-fips-provider-upstream@3.5.9-0.3.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssl-libs-x86-64", "name": "openssl-libs", "versionInfo": "1:3.5.9-0.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/openssl-libs-3.5.9-0.3.hum1.x86_64.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: ff278afa03fb60f6e5f5f40eee7aa06a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssl-libs@3.5.9-0.3.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-p11-kit-trust-x86-64", "name": "p11-kit-trust", "versionInfo": "0.26.5-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/p11-kit-trust-0.26.5-1.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 8de88a36ce4be4422ccf3d5985f6ed5f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/p11-kit-trust@0.26.5-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-p11-kit-x86-64", "name": "p11-kit", "versionInfo": "0.26.5-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/p11-kit-0.26.5-1.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 7769729a33beed05c5fe3b491ad9c342"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/p11-kit@0.26.5-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-package-notes-srpm-macros-x86-64", "name": "package-notes-srpm-macros", "versionInfo": "0.20-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/package-notes-srpm-macros-0.20-2.hum1.noarch.rpm", "licenseDeclared": "0BSD", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 4f6f48e6009eb2455ec194f477f9b058"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/package-notes-srpm-macros@0.20-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pam-libs-x86-64", "name": "pam-libs", "versionInfo": "1.7.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pam-libs-1.7.2-4.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 45d84f782c6e8ec75d9327ceb3697eac"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pam-libs@1.7.2-4.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pam-x86-64", "name": "pam", "versionInfo": "1.7.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pam-1.7.2-4.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 9ba9bf68c1aefc2742d29da3d09275d0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pam@1.7.2-4.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-patch-x86-64", "name": "patch", "versionInfo": "2.8-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/patch-2.8-6.2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: be9f10dfbcc1294681038d6557685a87"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/patch@2.8-6.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-devel-x86-64", "name": "pcre2-devel", "versionInfo": "10.49-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pcre2-devel-10.49-0.2.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 92fc28a661344bee1020dbc7eea4fabb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2-devel@10.49-0.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-syntax-x86-64", "name": "pcre2-syntax", "versionInfo": "10.49-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pcre2-syntax-10.49-0.2.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 5892ce77122ec3ecfec34fe8679d2737"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2-syntax@10.49-0.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-utf16-x86-64", "name": "pcre2-utf16", "versionInfo": "10.49-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pcre2-utf16-10.49-0.2.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: a09ebe158f5914671a041378a8860a09"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2-utf16@10.49-0.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-utf32-x86-64", "name": "pcre2-utf32", "versionInfo": "10.49-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pcre2-utf32-10.49-0.2.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 5422d2dfbb5050481301b1ebc6d75dcc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2-utf32@10.49-0.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-x86-64", "name": "pcre2", "versionInfo": "10.49-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pcre2-10.49-0.2.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: f04405508213c03b1dbc3a06b70e927f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2@10.49-0.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-perl-srpm-macros-x86-64", "name": "perl-srpm-macros", "versionInfo": "1-65.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/perl-srpm-macros-1-65.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 0f8b16c4e63430bcff87cb49fa941740"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/perl-srpm-macros@1-65.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-m4-x86-64", "name": "pkgconf-m4", "versionInfo": "2.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pkgconf-m4-2.5.1-2.1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later WITH Autoconf-exception-generic", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 2ee038a201817d6d825292dc25c6b873"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf-m4@2.5.1-2.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-pkg-config-x86-64", "name": "pkgconf-pkg-config", "versionInfo": "2.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pkgconf-pkg-config-2.5.1-2.1.hum1.x86_64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: baedfc689c0d5f9c6057ed88d39e7edc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf-pkg-config@2.5.1-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-x86-64", "name": "pkgconf", "versionInfo": "2.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pkgconf-2.5.1-2.1.hum1.x86_64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 835bd1e4bad5b079c83786f583596401"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf@2.5.1-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-policycoreutils-x86-64", "name": "policycoreutils", "versionInfo": "3.11-2.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/policycoreutils-3.11-2.3.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 0996619e6d531018175c763265ebb521"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/policycoreutils@3.11-2.3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-popt-x86-64", "name": "popt", "versionInfo": "1.19-11.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/popt-1.19-11.2.hum1.x86_64.rpm", "licenseDeclared": "MIT AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: c73e021a5dd1ebcd22f10bb597c28a0f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/popt@1.19-11.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-publicsuffix-list-dafsa-x86-64", "name": "publicsuffix-list-dafsa", "versionInfo": "20260624-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/publicsuffix-list-dafsa-20260624-2.1.hum1.noarch.rpm", "licenseDeclared": "MPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 258b22e06326223e99678d8138bba57d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/publicsuffix-list-dafsa@20260624-2.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pyproject-srpm-macros-x86-64", "name": "pyproject-srpm-macros", "versionInfo": "1.23.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pyproject-srpm-macros-1.23.2-1.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: e82edc55e5be2f520af44c2b0337e92a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pyproject-srpm-macros@1.23.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python-pip-wheel-x86-64", "name": "python-pip-wheel", "versionInfo": "26.2-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/python-pip-wheel-26.2-0.2.hum1.noarch.rpm", "licenseDeclared": "MIT AND Python-2.0.1 AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MPL-2.0 AND (Apache-2.0 OR BSD-2-Clause)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 30b1136e6baf2dc70c7e01a45cf96050"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python-pip-wheel@26.2-0.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python-srpm-macros-x86-64", "name": "python-srpm-macros", "versionInfo": "3.14-12.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/python-srpm-macros-3.14-12.2.hum1.noarch.rpm", "licenseDeclared": "MIT AND PSF-2.0 AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 618d0c006548a702f22df8ec49dca3a5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python-srpm-macros@3.14-12.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-libs-x86-64", "name": "python3-libs", "versionInfo": "3.14.8-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/python3-libs-3.14.8-1.1.hum1.x86_64.rpm", "licenseDeclared": "Python-2.0.1 AND MIT AND BSD-3-Clause AND MIT-CMU AND HPND-SMC AND BSD-2-Clause AND dtoa AND Unicode-3.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: af65a70be9a4388459abf914c4d6d866"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-libs@3.14.8-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-packaging-x86-64", "name": "python3-packaging", "versionInfo": "26.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/python3-packaging-26.2-4.1.hum1.noarch.rpm", "licenseDeclared": "BSD-2-Clause OR Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: cc27501b93aed57fe401a0e3e4befdf2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-packaging@26.2-4.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-x86-64", "name": "python3", "versionInfo": "3.14.8-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/python3-3.14.8-1.1.hum1.x86_64.rpm", "licenseDeclared": "Python-2.0.1", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 372e28a8b7ffa76c497a0c91cc712157"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3@3.14.8-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-qt5-srpm-macros-x86-64", "name": "qt5-srpm-macros", "versionInfo": "5.15.18-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/q/qt5-srpm-macros-5.15.18-3.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 4ffb52b3bdf4017e6c58f49b621e1c54"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/qt5-srpm-macros@5.15.18-3.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-qt6-srpm-macros-x86-64", "name": "qt6-srpm-macros", "versionInfo": "6.11.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/q/qt6-srpm-macros-6.11.2-1.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 8478ebf3654d031de2c0964fb1f5d8a2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/qt6-srpm-macros@6.11.2-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-readline-x86-64", "name": "readline", "versionInfo": "8.3-7.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/readline-8.3-7.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 6d5f55d88397da5ff5d6d44c166e44ad"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/readline@8.3-7.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-redhat-rpm-config-x86-64", "name": "redhat-rpm-config", "versionInfo": "345-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/redhat-rpm-config-345-4.hum1.noarch.rpm", "licenseDeclared": "GPL-1.0-or-later AND GPL-2.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 9e9b9de801d40d8b16d77058da82cde9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/redhat-rpm-config@345-4.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-build-libs-x86-64", "name": "rpm-build-libs", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-build-libs-6.1.0-1.2.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 0baa922ad9c3e1ad095fd9d12e2394d7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-build-libs@6.1.0-1.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-build-x86-64", "name": "rpm-build", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-build-6.1.0-1.2.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 67fc91cbee116e35e8237d0612cac73b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-build@6.1.0-1.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-libs-x86-64", "name": "rpm-libs", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-libs-6.1.0-1.2.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: f7db1d0e666bf1f6bab0f26286b4eb97"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-libs@6.1.0-1.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-plugin-selinux-x86-64", "name": "rpm-plugin-selinux", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-plugin-selinux-6.1.0-1.2.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 8cf4d7f735c2924dcd228c6c77bd9c78"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-plugin-selinux@6.1.0-1.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-sequoia-x86-64", "name": "rpm-sequoia", "versionInfo": "1.10.1.1-1.5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-sequoia-1.10.1.1-1.5.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later AND Apache-2.0 AND BSL-1.0 AND MIT AND Unicode-DFS-2016 AND (Apache-2.0 OR MIT) AND (MIT OR Apache-2.0 OR Zlib) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 5cf9f6fd1ce035bcea5b932aa655b4e9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-sequoia@1.10.1.1-1.5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-sign-libs-x86-64", "name": "rpm-sign-libs", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-sign-libs-6.1.0-1.2.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 82522c636e596baf9494cc2cf675e6b9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-sign-libs@6.1.0-1.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-x86-64", "name": "rpm", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-6.1.0-1.2.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 7be6cc60a527bea3108257110ef7386f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm@6.1.0-1.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rust-srpm-macros-x86-64", "name": "rust-srpm-macros", "versionInfo": "28.5-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rust-srpm-macros-28.5-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 606a7a2166723ba0e3515fa8244596dc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rust-srpm-macros@28.5-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sed-x86-64", "name": "sed", "versionInfo": "4.10-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/sed-4.10-2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: b7e0ef816a5a8405eb5ecbeead8b8387"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sed@4.10-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-selinux-policy-targeted-x86-64", "name": "selinux-policy-targeted", "versionInfo": "45.21-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/selinux-policy-targeted-45.21-1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: afd3a0e6066718b6633918ff5031c1ce"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/selinux-policy-targeted@45.21-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-selinux-policy-x86-64", "name": "selinux-policy", "versionInfo": "45.21-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/selinux-policy-45.21-1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 910958d9c5c1913d447a1e64fb0ad0b6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/selinux-policy@45.21-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-setup-x86-64", "name": "setup", "versionInfo": "2.15.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/setup-2.15.1-2.1.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 7306efa4649c49f3d249269ae6781e58"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/setup@2.15.1-2.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-shadow-utils-subid-devel-x86-64", "name": "shadow-utils-subid-devel", "versionInfo": "2:4.20.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/shadow-utils-subid-devel-4.20.0-1.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: ee1d22b34118a2628a2ae1f77508e3e7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/shadow-utils-subid-devel@4.20.0-1.1.hum1?arch=x86_64&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-shadow-utils-subid-x86-64", "name": "shadow-utils-subid", "versionInfo": "2:4.20.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/shadow-utils-subid-4.20.0-1.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 561ff9681f656abde2126ae0ddeeea8f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/shadow-utils-subid@4.20.0-1.1.hum1?arch=x86_64&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-shadow-utils-x86-64", "name": "shadow-utils", "versionInfo": "2:4.20.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/shadow-utils-4.20.0-1.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: a40baacbe274a1fd7467dafc995fc06f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/shadow-utils@4.20.0-1.1.hum1?arch=x86_64&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sqlite-devel-x86-64", "name": "sqlite-devel", "versionInfo": "3.54.0-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/sqlite-devel-3.54.0-0.1.hum1.x86_64.rpm", "licenseDeclared": "blessing", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 82f3d896f347cddeda8cd62ef0f50a6d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sqlite-devel@3.54.0-0.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sqlite-libs-x86-64", "name": "sqlite-libs", "versionInfo": "3.54.0-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/sqlite-libs-3.54.0-0.1.hum1.x86_64.rpm", "licenseDeclared": "blessing", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: d180ffce66ebf07fa47f35fb7f173cc8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sqlite-libs@3.54.0-0.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sqlite-x86-64", "name": "sqlite", "versionInfo": "3.54.0-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/sqlite-3.54.0-0.1.hum1.x86_64.rpm", "licenseDeclared": "blessing", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 37c74624ffaef8eafe81707eb480fe22"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sqlite@3.54.0-0.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sysprof-capture-devel-x86-64", "name": "sysprof-capture-devel", "versionInfo": "51.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/sysprof-capture-devel-51.0-1.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause-Patent", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 93dc6cea54d3b19719c51e6fc6171b65"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sysprof-capture-devel@51.0-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-devel-x86-64", "name": "systemd-devel", "versionInfo": "261.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/systemd-devel-261.2-1.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 59f38518d446d371ec8755c082ea0117"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-devel@261.2-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-libs-x86-64", "name": "systemd-libs", "versionInfo": "261.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/systemd-libs-261.2-1.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 63d4edd2cfd94aca76095674502f3a39"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-libs@261.2-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-rpm-macros-x86-64", "name": "systemd-rpm-macros", "versionInfo": "261.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/systemd-rpm-macros-261.2-1.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 52980d5eb7674cf6c5b0730b0095a2a4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-rpm-macros@261.2-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-shared-x86-64", "name": "systemd-shared", "versionInfo": "261.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/systemd-shared-261.2-1.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: c940e0d7ab9fd224976651a68fca6950"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-shared@261.2-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-standalone-sysusers-x86-64", "name": "systemd-standalone-sysusers", "versionInfo": "261.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/systemd-standalone-sysusers-261.2-1.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 0c32ee07c90e4e4e482a2e2ba7fc9909"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-standalone-sysusers@261.2-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-x86-64", "name": "systemd", "versionInfo": "261.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/systemd-261.2-1.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: f2ed06b12c0697bfc8a332d5d3163de3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd@261.2-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tar-x86-64", "name": "tar", "versionInfo": "2:1.35-10.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/t/tar-1.35-10.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 30d2b9bafd2631253a3cc376a8bb5895"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tar@1.35-10.1.hum1?arch=x86_64&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tpm2-tss-x86-64", "name": "tpm2-tss", "versionInfo": "4.2.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/t/tpm2-tss-4.2.0-1.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 945a1dbae0e23df3e0c036c7be3c6ed9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tpm2-tss@4.2.0-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tree-sitter-srpm-macros-x86-64", "name": "tree-sitter-srpm-macros", "versionInfo": "0.4.6-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/t/tree-sitter-srpm-macros-0.4.6-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: f65af17df28df341ec383338fcc47481"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tree-sitter-srpm-macros@0.4.6-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tzdata-x86-64", "name": "tzdata", "versionInfo": "2026e-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/t/tzdata-2026e-1.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain AND (GPL-2.0-only WITH ClassPath-exception-2.0)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: a1336045dee9a14e5ecb98f2e75ca023"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tzdata@2026e-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-unzip-x86-64", "name": "unzip", "versionInfo": "6.0-71.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/u/unzip-6.0-71.1.hum1.x86_64.rpm", "licenseDeclared": "Info-ZIP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 581811ac7611115e3a061c6a9742e6cc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/unzip@6.0-71.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-util-linux-core-x86-64", "name": "util-linux-core", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/u/util-linux-core-2.42.4-2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 65e6bb5ce193e259db92b1da1458a9f7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/util-linux-core@2.42.4-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-util-linux-x86-64", "name": "util-linux", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/u/util-linux-2.42.4-2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-1.0-or-later AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 9e691eac5b01ac766ab95d8f44e0f34c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/util-linux@2.42.4-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-which-x86-64", "name": "which", "versionInfo": "2.25-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/w/which-2.25-2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 6892b8bc6b61b94591d2d36efcbbb863"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/which@2.25-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xxhash-libs-x86-64", "name": "xxhash-libs", "versionInfo": "0.8.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/x/xxhash-libs-0.8.4-1.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 3d91a1be44d587bb71ff080ac2b8c588"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xxhash-libs@0.8.4-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xz-libs-x86-64", "name": "xz-libs", "versionInfo": "1:5.8.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/x/xz-libs-5.8.4-1.1.hum1.x86_64.rpm", "licenseDeclared": "0BSD", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: f53b834106c4229e7ba3483e9bafb67f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xz-libs@5.8.4-1.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xz-x86-64", "name": "xz", "versionInfo": "1:5.8.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/x/xz-5.8.4-1.1.hum1.x86_64.rpm", "licenseDeclared": "0BSD AND GPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: e2e7b3e9e3c31d3d1fda36dd4704d919"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xz@5.8.4-1.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zig-srpm-macros-x86-64", "name": "zig-srpm-macros", "versionInfo": "1-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/z/zig-srpm-macros-1-9.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 0c226eb1fa4d5fc3d272055b6397b077"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zig-srpm-macros@1-9.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zip-x86-64", "name": "zip", "versionInfo": "3.0-46.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/z/zip-3.0-46.1.hum1.x86_64.rpm", "licenseDeclared": "Info-ZIP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 06b1fc2c4bd5655fd89e389c6b0afa05"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zip@3.0-46.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zlib-ng-compat-devel-x86-64", "name": "zlib-ng-compat-devel", "versionInfo": "2.3.3-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/z/zlib-ng-compat-devel-2.3.3-6.1.hum1.x86_64.rpm", "licenseDeclared": "Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 6ff4e811a82a277531e244ee46a61b28"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zlib-ng-compat-devel@2.3.3-6.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zlib-ng-compat-x86-64", "name": "zlib-ng-compat", "versionInfo": "2.3.3-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/z/zlib-ng-compat-2.3.3-6.1.hum1.x86_64.rpm", "licenseDeclared": "Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: 6f0531e35b9ec4b90b2a3d2debc0c51e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zlib-ng-compat@2.3.3-6.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zstd-x86-64", "name": "zstd", "versionInfo": "1.5.7-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/z/zstd-1.5.7-6.2.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:37:37Z", "comment": "sigmd5: ea2450a029df76814e66045458cf3d03"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zstd@1.5.7-6.2.hum1?arch=x86_64"}]}, {"name": "buildah", "SPDXID": "SPDXRef-Package-rpm-buildah-6c70d869630a9d5c", "versionInfo": "1.45.1-1.1.hum1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from RPM DB: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:buildah:buildah:1.45.1-1.1.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/hummingbird/buildah@1.45.1-1.1.hum1?distro=hummingbird-1"}]}, {"name": "dario.cat/mergo", "SPDXID": "SPDXRef-Package-go-module-dario.cat-mergo-f2159732754ee9fe", "versionInfo": "v1.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/dario.cat/mergo@v1.0.2"}]}, {"name": "github.com/BurntSushi/toml", "SPDXID": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-f1f4e8537b1130d0", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:BurntSushi:toml:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/BurntSushi/toml@v1.6.0"}]}, {"name": "github.com/ProtonMail/go-crypto", "SPDXID": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-d30399e7b91b6816", "versionInfo": "v1.4.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ProtonMail:go-crypto:v1.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ProtonMail:go_crypto:v1.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/ProtonMail/go-crypto@v1.4.1"}]}, {"name": "github.com/VividCortex/ewma", "SPDXID": "SPDXRef-Package-go-module-github.com-VividCortex-ewma-8b909e3041c77ed0", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:VividCortex:ewma:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/VividCortex/ewma@v1.2.0"}]}, {"name": "github.com/acarl005/stripansi", "SPDXID": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-faf968f5fa155102", "versionInfo": "v0.0.0-20180116102854-5a71ef0e047d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:acarl005:stripansi:v0.0.0-20180116102854-5a71ef0e047d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/acarl005/stripansi@v0.0.0-20180116102854-5a71ef0e047d"}]}, {"name": "github.com/aead/serpent", "SPDXID": "SPDXRef-Package-go-module-github.com-aead-serpent-acb3dc9e0e09c500", "versionInfo": "v0.0.0-20160714141033-fba169763ea6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aead:serpent:v0.0.0-20160714141033-fba169763ea6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aead/serpent@v0.0.0-20160714141033-fba169763ea6"}]}, {"name": "github.com/cespare/xxhash/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-aa81da1151880334", "versionInfo": "v2.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cespare/xxhash@v2.3.0#v2"}]}, {"name": "github.com/chzyer/readline", "SPDXID": "SPDXRef-Package-go-module-github.com-chzyer-readline-7d6736fc6a324c8a", "versionInfo": "v1.5.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:chzyer:readline:v1.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/chzyer/readline@v1.5.1"}]}, {"name": "github.com/clipperhouse/uax29/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-e706966db2839d4d", "versionInfo": "v2.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:clipperhouse:uax29\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/clipperhouse/uax29@v2.7.0#v2"}]}, {"name": "github.com/cloudflare/circl", "SPDXID": "SPDXRef-Package-go-module-github.com-cloudflare-circl-e85d8632dc67b132", "versionInfo": "v1.6.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cloudflare:circl:v1.6.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cloudflare/circl@v1.6.3"}]}, {"name": "github.com/containerd/errdefs", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-errdefs-38142e900e78c7b6", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:errdefs:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/errdefs@v1.0.0"}]}, {"name": "github.com/containerd/errdefs/pkg", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-fa287d98153481a9", "versionInfo": "v0.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:errdefs\\/pkg:v0.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/errdefs@v0.3.0#pkg"}]}, {"name": "github.com/containerd/log", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-log-df1190c5b628a5d4", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:log:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/log@v0.1.0"}]}, {"name": "github.com/containerd/platforms", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-platforms-355c547ae078d435", "versionInfo": "v1.0.0-rc.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:platforms:v1.0.0-rc.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/platforms@v1.0.0-rc.4"}]}, {"name": "github.com/containerd/stargz-snapshotter/estargz", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-stargz-snapshotter-estargz-821ab487c983983e", "versionInfo": "v0.18.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:stargz-snapshotter\\/estargz:v0.18.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:stargz_snapshotter\\/estargz:v0.18.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/stargz-snapshotter@v0.18.2#estargz"}]}, {"name": "github.com/containerd/typeurl/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-abc17a7471220476", "versionInfo": "v2.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:typeurl\\/v2:v2.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/typeurl@v2.3.0#v2"}]}, {"name": "github.com/containers/libtrust", "SPDXID": "SPDXRef-Package-go-module-github.com-containers-libtrust-22d54e00fa6bc037", "versionInfo": "v0.0.0-20230121012942-c1716e8a8d01", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containers:libtrust:v0.0.0-20230121012942-c1716e8a8d01:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containers/libtrust@v0.0.0-20230121012942-c1716e8a8d01"}]}, {"name": "github.com/containers/luksy", "SPDXID": "SPDXRef-Package-go-module-github.com-containers-luksy-2a3b441fcfef50db", "versionInfo": "v0.0.0-20251208191447-ca096313c38f", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containers:luksy:v0.0.0-20251208191447-ca096313c38f:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containers/luksy@v0.0.0-20251208191447-ca096313c38f"}]}, {"name": "github.com/containers/ocicrypt", "SPDXID": "SPDXRef-Package-go-module-github.com-containers-ocicrypt-f47106616962145f", "versionInfo": "v1.3.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containers:ocicrypt:v1.3.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containers/ocicrypt@v1.3.2"}]}, {"name": "github.com/coreos/go-systemd/v22", "SPDXID": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-v22-7a5d0d606b0927dd", "versionInfo": "v22.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go-systemd\\/v22:v22.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go_systemd\\/v22:v22.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/coreos/go-systemd@v22.7.0#v22"}]}, {"name": "github.com/cyberphone/json-canonicalization", "SPDXID": "SPDXRef-Package-go-module-github.com-cyberphone-json-canonicalization-c60ba6050d54fdf3", "versionInfo": "v0.0.0-20241213102144-19d51d7fe467", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyberphone:json-canonicalization:v0.0.0-20241213102144-19d51d7fe467:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyberphone:json_canonicalization:v0.0.0-20241213102144-19d51d7fe467:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cyberphone/json-canonicalization@v0.0.0-20241213102144-19d51d7fe467"}]}, {"name": "github.com/cyphar/filepath-securejoin", "SPDXID": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-7d291e472258021f", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyphar:filepath-securejoin:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyphar:filepath_securejoin:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cyphar/filepath-securejoin@v0.7.0"}]}, {"name": "github.com/davecgh/go-spew", "SPDXID": "SPDXRef-Package-go-module-github.com-davecgh-go-spew-8dbf4a3170e62d8e", "versionInfo": "v1.1.2-0.20180830191138-d8f796af33cc", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:davecgh:go-spew:v1.1.2-0.20180830191138-d8f796af33cc:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:davecgh:go_spew:v1.1.2-0.20180830191138-d8f796af33cc:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc"}]}, {"name": "github.com/disiqueira/gotree/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-disiqueira-gotree-v3-11f7215c27bd4d77", "versionInfo": "v3.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:disiqueira:gotree\\/v3:v3.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/disiqueira/gotree@v3.0.2#v3"}]}, {"name": "github.com/distribution/reference", "SPDXID": "SPDXRef-Package-go-module-github.com-distribution-reference-3acf9a16b0be5fe1", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:distribution:reference:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/distribution/reference@v0.6.0"}]}, {"name": "github.com/docker/distribution", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-distribution-a3764ae6e8e7f5d1", "versionInfo": "v2.8.3+incompatible", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:distribution:v2.8.3\\+incompatible:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/distribution@v2.8.3%2Bincompatible"}]}, {"name": "github.com/docker/docker-credential-helpers", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-998be4236129bb60", "versionInfo": "v0.9.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:docker-credential-helpers:v0.9.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:docker_credential_helpers:v0.9.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.8"}]}, {"name": "github.com/docker/go-connections", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-go-connections-41ecf8d5cd80b722", "versionInfo": "v0.8.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go-connections:v0.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go_connections:v0.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/go-connections@v0.8.1"}]}, {"name": "github.com/docker/go-units", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-go-units-8158c70f999e9144", "versionInfo": "v0.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go-units:v0.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go_units:v0.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/go-units@v0.5.0"}]}, {"name": "github.com/felixge/httpsnoop", "SPDXID": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-cc7a271ed364e1f2", "versionInfo": "v1.0.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:felixge:httpsnoop:v1.0.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/felixge/httpsnoop@v1.0.4"}]}, {"name": "github.com/fsnotify/fsnotify", "SPDXID": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-8d700703a04ab5f9", "versionInfo": "v1.10.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fsnotify:fsnotify:v1.10.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fsnotify/fsnotify@v1.10.1"}]}, {"name": "github.com/fsouza/go-dockerclient", "SPDXID": "SPDXRef-Package-go-module-github.com-fsouza-go-dockerclient-1120952078b625ba", "versionInfo": "v1.13.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fsouza:go-dockerclient:v1.13.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fsouza:go_dockerclient:v1.13.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fsouza/go-dockerclient@v1.13.2"}]}, {"name": "github.com/go-jose/go-jose/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-801c339287f4ad63", "versionInfo": "v4.1.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-jose/go-jose@v4.1.4#v4"}]}, {"name": "github.com/go-logr/logr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-logr-0020afe78124402d", "versionInfo": "v1.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:logr:v1.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:logr:v1.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:logr:v1.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/logr@v1.4.3"}]}, {"name": "github.com/go-logr/stdr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-stdr-921840c28a0a356f", "versionInfo": "v1.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/stdr@v1.2.2"}]}, {"name": "github.com/godbus/dbus/v5", "SPDXID": "SPDXRef-Package-go-module-github.com-godbus-dbus-v5-3026c25ff013ad9e", "versionInfo": "v5.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:godbus:dbus\\/v5:v5.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/godbus/dbus@v5.2.2#v5"}]}, {"name": "github.com/google/go-containerregistry", "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-fa92d73d599800e2", "versionInfo": "v0.21.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go-containerregistry:v0.21.6:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go_containerregistry:v0.21.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/go-containerregistry@v0.21.6"}]}, {"name": "github.com/google/go-intervals", "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-intervals-88bef8551d9e34a2", "versionInfo": "v0.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go-intervals:v0.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go_intervals:v0.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/go-intervals@v0.0.2"}]}, {"name": "github.com/google/uuid", "SPDXID": "SPDXRef-Package-go-module-github.com-google-uuid-a5af0dff445a1660", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/uuid@v1.6.0"}]}, {"name": "github.com/gorilla/mux", "SPDXID": "SPDXRef-Package-go-module-github.com-gorilla-mux-bf6311fc042b7cf4", "versionInfo": "v1.8.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gorilla:mux:v1.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gorilla/mux@v1.8.1"}]}, {"name": "github.com/hashicorp/errwrap", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-8a003b3dd3487a09", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:errwrap:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0"}]}, {"name": "github.com/hashicorp/go-multierror", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-414b560d9557ff60", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-multierror:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_multierror:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1"}]}, {"name": "github.com/jinzhu/copier", "SPDXID": "SPDXRef-Package-go-module-github.com-jinzhu-copier-e8a1bf9d8befc84e", "versionInfo": "v0.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jinzhu:copier:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jinzhu/copier@v0.4.0"}]}, {"name": "github.com/json-iterator/go", "SPDXID": "SPDXRef-Package-go-module-github.com-json-iterator-go-93093e83f9fa3127", "versionInfo": "v1.1.12", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json-iterator:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json_iterator:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/json-iterator/go@v1.1.12"}]}, {"name": "github.com/klauspost/compress", "SPDXID": "SPDXRef-Package-go-module-github.com-klauspost-compress-f694917e47c49e7e", "versionInfo": "v1.19.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:klauspost:compress:v1.19.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/klauspost/compress@v1.19.1"}]}, {"name": "github.com/klauspost/pgzip", "SPDXID": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-01f0c6d08cadf258", "versionInfo": "v1.2.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:klauspost:pgzip:v1.2.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/klauspost/pgzip@v1.2.6"}]}, {"name": "github.com/kr/fs", "SPDXID": "SPDXRef-Package-go-module-github.com-kr-fs-a3149a9eaed83a6d", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:kr:fs:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/kr/fs@v0.1.0"}]}, {"name": "github.com/manifoldco/promptui", "SPDXID": "SPDXRef-Package-go-module-github.com-manifoldco-promptui-619fa7e3aa94579b", "versionInfo": "v0.9.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:manifoldco:promptui:v0.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/manifoldco/promptui@v0.9.0"}]}, {"name": "github.com/mattn/go-runewidth", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-d4a0172ae3985722", "versionInfo": "v0.0.27", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-runewidth:v0.0.27:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_runewidth:v0.0.27:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-runewidth@v0.0.27"}]}, {"name": "github.com/mattn/go-shellwords", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-2bb01abb997fe50d", "versionInfo": "v1.0.14", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-shellwords:v1.0.14:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_shellwords:v1.0.14:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-shellwords@v1.0.14"}]}, {"name": "github.com/mattn/go-sqlite3", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-sqlite3-b6fcb30fb37f8f7d", "versionInfo": "v1.14.48", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-sqlite3:v1.14.48:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_sqlite3:v1.14.48:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-sqlite3@v1.14.48"}]}, {"name": "github.com/miekg/pkcs11", "SPDXID": "SPDXRef-Package-go-module-github.com-miekg-pkcs11-7378222ed82bacab", "versionInfo": "v1.1.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:miekg:pkcs11:v1.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/miekg/pkcs11@v1.1.2"}]}, {"name": "github.com/mistifyio/go-zfs/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-mistifyio-go-zfs-v4-6c9b28b713e6fc04", "versionInfo": "v4.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mistifyio:go-zfs\\/v4:v4.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mistifyio:go_zfs\\/v4:v4.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mistifyio/go-zfs@v4.0.0#v4"}]}, {"name": "github.com/moby/buildkit", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-buildkit-98e4f7d6f08309e4", "versionInfo": "v0.31.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:buildkit:v0.31.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/buildkit@v0.31.2"}]}, {"name": "github.com/moby/docker-image-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-01d869c2158f1316", "versionInfo": "v1.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:docker-image-spec:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:docker_image_spec:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/docker-image-spec@v1.3.1"}]}, {"name": "github.com/moby/go-archive", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-go-archive-445d566bea70949d", "versionInfo": "v0.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:go-archive:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:go_archive:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/go-archive@v0.2.0"}]}, {"name": "github.com/moby/moby/api", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-moby-api-c7e07c90d9a15549", "versionInfo": "v1.55.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:moby\\/api:v1.55.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/moby@v1.55.0#api"}]}, {"name": "github.com/moby/moby/client", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-moby-client-564b825cd87384b7", "versionInfo": "v0.5.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:moby\\/client:v0.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/moby@v0.5.1#client"}]}, {"name": "github.com/moby/patternmatcher", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-e1e6ac7b2a593d2c", "versionInfo": "v0.6.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:patternmatcher:v0.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/patternmatcher@v0.6.1"}]}, {"name": "github.com/moby/sys/capability", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-capability-03310c18677b51d4", "versionInfo": "v0.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/capability:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.4.0#capability"}]}, {"name": "github.com/moby/sys/devices", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-devices-1962d7c069d95dc9", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/devices:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.1.0#devices"}]}, {"name": "github.com/moby/sys/mountinfo", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-7c4cc245149b2617", "versionInfo": "v0.7.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/mountinfo:v0.7.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.7.2#mountinfo"}]}, {"name": "github.com/moby/sys/sequential", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-caa3a6947c4366ee", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/sequential:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.7.0#sequential"}]}, {"name": "github.com/moby/sys/user", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-user-b667e3a9a1366bd3", "versionInfo": "v0.4.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/user:v0.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.4.1#user"}]}, {"name": "github.com/moby/sys/userns", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-userns-9f865aec64c5184c", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/userns:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.1.0#userns"}]}, {"name": "github.com/moby/term", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-term-948ddf9f4e374afa", "versionInfo": "v0.5.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:term:v0.5.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/term@v0.5.2"}]}, {"name": "github.com/modern-go/concurrent", "SPDXID": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-f7f46314964bbf21", "versionInfo": "v0.0.0-20180306012644-bacd9c7ef1dd", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern-go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern_go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd"}]}, {"name": "github.com/modern-go/reflect2", "SPDXID": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-bbb709de709a42a6", "versionInfo": "v1.0.3-0.20250322232337-35a7c28c31ee", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern-go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern_go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee"}]}, {"name": "github.com/opencontainers/cgroups", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-cgroups-7c6041ab854139e8", "versionInfo": "v0.0.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:cgroups:v0.0.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/cgroups@v0.0.8"}]}, {"name": "github.com/opencontainers/go-digest", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-6b570b2073639cad", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:go-digest:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:go_digest:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0"}]}, {"name": "github.com/opencontainers/image-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-06b4df7c9c46894a", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:image-spec:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:image_spec:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1"}]}, {"name": "github.com/opencontainers/runc", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-runc-aa9944764021d773", "versionInfo": "v1.5.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runc:v1.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/runc@v1.5.1"}]}, {"name": "github.com/opencontainers/runtime-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-d44550073c939599", "versionInfo": "v1.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime-spec:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime_spec:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/runtime-spec@v1.3.0"}]}, {"name": "github.com/opencontainers/runtime-tools", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-tools-adea2184748fe433", "versionInfo": "v0.9.1-0.20260316125833-8a4db579f5c8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime-tools:v0.9.1-0.20260316125833-8a4db579f5c8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime_tools:v0.9.1-0.20260316125833-8a4db579f5c8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/runtime-tools@v0.9.1-0.20260316125833-8a4db579f5c8"}]}, {"name": "github.com/opencontainers/selinux", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-selinux-3d44188fb172b94a", "versionInfo": "v1.15.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:selinux:v1.15.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/selinux@v1.15.1"}]}, {"name": "github.com/openshift/imagebuilder", "SPDXID": "SPDXRef-Package-go-module-github.com-openshift-imagebuilder-5da63a30f2e9d243", "versionInfo": "v1.2.21", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:openshift:imagebuilder:v1.2.21:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/openshift/imagebuilder@v1.2.21"}]}, {"name": "github.com/pkg/errors", "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-errors-2f578f7e70238867", "versionInfo": "v0.9.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pkg/errors@v0.9.1"}]}, {"name": "github.com/pkg/sftp", "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-sftp-f539aa21b60e33b1", "versionInfo": "v1.13.11", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pkg:sftp:v1.13.11:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pkg/sftp@v1.13.11"}]}, {"name": "github.com/planetscale/vtprotobuf", "SPDXID": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-5e74cf7656c46fc2", "versionInfo": "v0.6.1-0.20240319094008-0393e58bdf10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:planetscale:vtprotobuf:v0.6.1-0.20240319094008-0393e58bdf10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10"}]}, {"name": "github.com/pmezard/go-difflib", "SPDXID": "SPDXRef-Package-go-module-github.com-pmezard-go-difflib-362a66aa020df3d8", "versionInfo": "v1.0.1-0.20181226105442-5d4384ee4fb2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pmezard:go-difflib:v1.0.1-0.20181226105442-5d4384ee4fb2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pmezard:go_difflib:v1.0.1-0.20181226105442-5d4384ee4fb2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pmezard/go-difflib@v1.0.1-0.20181226105442-5d4384ee4fb2"}]}, {"name": "github.com/proglottis/gpgme", "SPDXID": "SPDXRef-Package-go-module-github.com-proglottis-gpgme-d34351de0fd4a0a5", "versionInfo": "v0.1.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gpgme_project:gpgme:v0.1.6:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/proglottis/gpgme@v0.1.6"}]}, {"name": "github.com/seccomp/libseccomp-golang", "SPDXID": "SPDXRef-Package-go-module-github.com-seccomp-libseccomp-golang-9f173b7c13ffe432", "versionInfo": "v0.11.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:seccomp:libseccomp-golang:v0.11.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:seccomp:libseccomp_golang:v0.11.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/seccomp/libseccomp-golang@v0.11.1"}]}, {"name": "github.com/secure-systems-lab/go-securesystemslib", "SPDXID": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-cfb0c27962de2c13", "versionInfo": "v0.11.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure-systems-lab:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure-systems-lab:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure_systems_lab:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure_systems_lab:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure-systems:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure-systems:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure_systems:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure_systems:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.11.0"}]}, {"name": "github.com/sigstore/fulcio", "SPDXID": "SPDXRef-Package-go-module-github.com-sigstore-fulcio-b55414f36dec4e9e", "versionInfo": "v1.8.7", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sigstore:fulcio:v1.8.7:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sigstore/fulcio@v1.8.7"}]}, {"name": "github.com/sigstore/protobuf-specs", "SPDXID": "SPDXRef-Package-go-module-github.com-sigstore-protobuf-specs-8ec1c134d1569161", "versionInfo": "v0.5.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sigstore:protobuf-specs:v0.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sigstore:protobuf_specs:v0.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sigstore/protobuf-specs@v0.5.1"}]}, {"name": "github.com/sigstore/sigstore", "SPDXID": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-d3003717d45bfd7e", "versionInfo": "v1.10.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sigstore:sigstore:v1.10.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sigstore/sigstore@v1.10.8"}]}, {"name": "github.com/sirupsen/logrus", "SPDXID": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-ec396ff79d516850", "versionInfo": "v1.9.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sirupsen:logrus:v1.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sirupsen/logrus@v1.9.4"}]}, {"name": "github.com/smallstep/pkcs7", "SPDXID": "SPDXRef-Package-go-module-github.com-smallstep-pkcs7-eb3c55705f3b0d04", "versionInfo": "v0.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:smallstep:pkcs7:v0.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/smallstep/pkcs7@v0.2.1"}]}, {"name": "github.com/spf13/cobra", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-cobra-771c15d9e912198b", "versionInfo": "v1.10.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:cobra:v1.10.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/cobra@v1.10.2"}]}, {"name": "github.com/spf13/pflag", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-pflag-63daee36f399c341", "versionInfo": "v1.0.10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:pflag:v1.0.10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/pflag@v1.0.10"}]}, {"name": "github.com/stefanberger/go-pkcs11uri", "SPDXID": "SPDXRef-Package-go-module-github.com-stefanberger-go-pkcs11uri-fbb39a61e785f612", "versionInfo": "v0.0.0-20230803200340-78284954bff6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:stefanberger:go-pkcs11uri:v0.0.0-20230803200340-78284954bff6:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:stefanberger:go_pkcs11uri:v0.0.0-20230803200340-78284954bff6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/stefanberger/go-pkcs11uri@v0.0.0-20230803200340-78284954bff6"}]}, {"name": "github.com/sylabs/sif/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-dfcf4515f544547e", "versionInfo": "v2.24.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sylabs:sif\\/v2:v2.24.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sylabs/sif@v2.24.1#v2"}]}, {"name": "github.com/tchap/go-patricia/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-tchap-go-patricia-v2-b6a0d9354d883533", "versionInfo": "v2.3.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tchap:go-patricia\\/v2:v2.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tchap:go_patricia\\/v2:v2.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/tchap/go-patricia@v2.3.3#v2"}]}, {"name": "github.com/tonistiigi/dchapes-mode", "SPDXID": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-3c6a164e11b57a47", "versionInfo": "v0.0.0-20250318174251-73d941a28323", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tonistiigi:dchapes-mode:v0.0.0-20250318174251-73d941a28323:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tonistiigi:dchapes_mode:v0.0.0-20250318174251-73d941a28323:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/tonistiigi/dchapes-mode@v0.0.0-20250318174251-73d941a28323"}]}, {"name": "github.com/ulikunitz/xz", "SPDXID": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-39375bec3e5afda9", "versionInfo": "v0.5.16", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ulikunitz:xz:v0.5.16:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/ulikunitz/xz@v0.5.16"}]}, {"name": "github.com/vbatts/tar-split", "SPDXID": "SPDXRef-Package-go-module-github.com-vbatts-tar-split-89e5f8c806391396", "versionInfo": "v0.12.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbatts:tar-split:v0.12.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbatts:tar_split:v0.12.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vbatts/tar-split@v0.12.3"}]}, {"name": "github.com/vbauerster/cupwriter", "SPDXID": "SPDXRef-Package-go-module-github.com-vbauerster-cupwriter-80fc8f48d7a0e4e1", "versionInfo": "v0.0.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbauerster:cupwriter:v0.0.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vbauerster/cupwriter@v0.0.4"}]}, {"name": "github.com/vbauerster/mpb/v8", "SPDXID": "SPDXRef-Package-go-module-github.com-vbauerster-mpb-v8-4f31d98c3fb7f3e0", "versionInfo": "v8.14.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbauerster:mpb\\/v8:v8.14.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vbauerster/mpb@v8.14.0#v8"}]}, {"name": "github.com/vishvananda/netlink", "SPDXID": "SPDXRef-Package-go-module-github.com-vishvananda-netlink-20e23125685b4de2", "versionInfo": "v1.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vishvananda:netlink:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vishvananda/netlink@v1.3.1"}]}, {"name": "github.com/vishvananda/netns", "SPDXID": "SPDXRef-Package-go-module-github.com-vishvananda-netns-b2535e341822d8a0", "versionInfo": "v0.0.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vishvananda:netns:v0.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vishvananda/netns@v0.0.5"}]}, {"name": "github.com/youmark/pkcs8", "SPDXID": "SPDXRef-Package-go-module-github.com-youmark-pkcs8-285865ea7f4cb590", "versionInfo": "v0.0.0-20240726163527-a2c0da244d78", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:youmark:pkcs8:v0.0.0-20240726163527-a2c0da244d78:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/youmark/pkcs8@v0.0.0-20240726163527-a2c0da244d78"}]}, {"name": "go.etcd.io/bbolt", "SPDXID": "SPDXRef-Package-go-module-go.etcd.io-bbolt-0f9aec18f0070f80", "versionInfo": "v1.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.etcd.io/bbolt@v1.5.0"}]}, {"name": "go.opentelemetry.io/auto/sdk", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-d768c945663c7631", "versionInfo": "v1.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:auto:sdk:v1.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1"}]}, {"name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-65aa807d9971eb9b", "versionInfo": "v0.69.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/otelhttp:v0.69.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation@v0.69.0#net/http/otelhttp"}]}, {"name": "go.opentelemetry.io/otel", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-9265a3db565f0629", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel@v1.44.0"}]}, {"name": "go.opentelemetry.io/otel/metric", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-676c006ee38fe3df", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:metric:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/metric@v1.44.0"}]}, {"name": "go.opentelemetry.io/otel/trace", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-3886b13fc6616984", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:trace:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/trace@v1.44.0"}]}, {"name": "go.podman.io/buildah", "SPDXID": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "versionInfo": "v0.0.0-20261012000000-ff0ad7e9b3f6+dirty", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.podman.io/buildah@v0.0.0-20261012000000-ff0ad7e9b3f6%2Bdirty"}]}, {"name": "go.podman.io/common", "SPDXID": "SPDXRef-Package-go-module-go.podman.io-common-2e8b2ebb13ddb714", "versionInfo": "v0.69.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.podman.io/common@v0.69.2"}]}, {"name": "go.podman.io/image/v5", "SPDXID": "SPDXRef-Package-go-module-go.podman.io-image-v5-421f0737d6bb7d4a", "versionInfo": "v5.41.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:image:v5:v5.41.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.podman.io/image/v5@v5.41.2"}]}, {"name": "go.podman.io/storage", "SPDXID": "SPDXRef-Package-go-module-go.podman.io-storage-f5e609952f271483", "versionInfo": "v1.64.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.podman.io/storage@v1.64.1"}]}, {"name": "go.yaml.in/yaml/v2", "SPDXID": "SPDXRef-Package-go-module-go.yaml.in-yaml-v2-31fa2a730ffd24e3", "versionInfo": "v2.4.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml:v2:v2.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.yaml.in/yaml/v2@v2.4.4"}]}, {"name": "go.yaml.in/yaml/v3", "SPDXID": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-7149d4dd74285a8b", "versionInfo": "v3.0.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml:v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.yaml.in/yaml/v3@v3.0.5"}]}, {"name": "golang.org/x/crypto", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-crypto-6d504b74128cd0be", "versionInfo": "v0.56.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:ssh:v0.56.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/crypto@v0.56.0"}]}, {"name": "golang.org/x/mod", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-mod-5fa5fdfabb153a20", "versionInfo": "v0.38.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/mod:v0.38.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/mod@v0.38.0"}]}, {"name": "golang.org/x/net", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-net-1ee77ee332aded06", "versionInfo": "v0.57.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:networking:v0.57.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/net@v0.57.0"}]}, {"name": "golang.org/x/sync", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sync-c7d25c9f4a245acd", "versionInfo": "v0.22.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sync:v0.22.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sync@v0.22.0"}]}, {"name": "golang.org/x/sys", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sys-0103bc6211087fec", "versionInfo": "v0.47.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sys:v0.47.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sys@v0.47.0"}]}, {"name": "golang.org/x/term", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-term-c3e6f629bdd08436", "versionInfo": "v0.45.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/term:v0.45.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/term@v0.45.0"}]}, {"name": "golang.org/x/text", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-text-5cdcd85e2f601ac7", "versionInfo": "v0.41.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:text:v0.41.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/text@v0.41.0"}]}, {"name": "google.golang.org/genproto/googleapis/api", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-a7ffc4e5492718a3", "versionInfo": "v0.0.0-20260526163538-3dc84a4a5aaa", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260526163538-3dc84a4a5aaa:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260526163538-3dc84a4a5aaa#api"}]}, {"name": "google.golang.org/genproto/googleapis/rpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-84a0ff53fdfcd03b", "versionInfo": "v0.0.0-20260526163538-3dc84a4a5aaa", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260526163538-3dc84a4a5aaa:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260526163538-3dc84a4a5aaa#rpc"}]}, {"name": "google.golang.org/grpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-grpc-5d2637dfe4256947", "versionInfo": "v1.82.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:grpc:v1.82.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/grpc@v1.82.1"}]}, {"name": "google.golang.org/protobuf", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-protobuf-4e92219a7c0946f1", "versionInfo": "v1.36.11", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:protobuf:v1.36.11:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/protobuf@v1.36.11"}]}, {"name": "gopkg.in/yaml.v3", "SPDXID": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-94d4d4c06e17f915", "versionInfo": "v3.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml_project:yaml:v3.0.1:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/gopkg.in/yaml.v3@v3.0.1"}]}, {"name": "sigs.k8s.io/yaml", "SPDXID": "SPDXRef-Package-go-module-sigs.k8s.io-yaml-8aa851eabe08b2a2", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/sigs.k8s.io/yaml@v1.6.0"}]}, {"name": "stdlib", "SPDXID": "SPDXRef-Package-go-module-stdlib-a98a10207e4c5334", "versionInfo": "go1.27.2-X:nodwarf5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:go:1.27.2:-:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/stdlib@1.27.2-X%3Anodwarf5"}]}, {"name": "tags.cncf.io/container-device-interface", "SPDXID": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-1baec04535dcf4bd", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/tags.cncf.io/container-device-interface@v1.1.0"}]}, {"name": "tags.cncf.io/container-device-interface/specs-go", "SPDXID": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-specs-go-63f36bb454cae0bc", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container-device-interface:specs-go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container-device-interface:specs_go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container_device_interface:specs-go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container_device_interface:specs_go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container-device:specs-go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container-device:specs_go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container_device:specs-go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container_device:specs_go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container:specs-go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container:specs_go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/tags.cncf.io/container-device-interface/specs-go@v1.1.0"}]}, {"name": "rpm-extracted/buildah-1.45.1-1.1.hum1.aarch64", "SPDXID": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "./.github/workflows/lima.yml", "SPDXID": "SPDXRef-Package-github-action-workflow-.-.github-workflows-lima.yml-15a82663c9dba3c9", "versionInfo": "UNKNOWN", "supplier": "Organization: .", "originator": "Organization: .", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /buildah-1.45.1/.github/workflows/ci.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:.\\/.github\\/workflows\\/lima.yml:.\\/.github\\/workflows\\/lima.yml:*:*:*:*:*:*:*:*"}]}, {"name": "actions/checkout", "SPDXID": "SPDXRef-Package-github-action-actions-checkout-ce9d12084d1daaed", "versionInfo": "v7.0.1", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /buildah-1.45.1/.github/workflows/ci.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/checkout@v7.0.1"}]}, {"name": "actions/checkout", "SPDXID": "SPDXRef-Package-github-action-actions-checkout-13b3c98fc1379020", "versionInfo": "v7.0.1", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /buildah-1.45.1/.github/workflows/lima.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/checkout@v7.0.1"}]}, {"name": "actions/setup-go", "SPDXID": "SPDXRef-Package-github-action-actions-setup-go-b3faae15ddb8a4c7", "versionInfo": "v7.0.0", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /buildah-1.45.1/.github/workflows/ci.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/setup-go@v7.0.0"}]}, {"name": "actions/stale", "SPDXID": "SPDXRef-Package-github-action-actions-stale-04f27f671e49a252", "versionInfo": "v11.0.0", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /buildah-1.45.1/.github/workflows/stale.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/stale:actions\\/stale:v11.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/stale@v11.0.0"}]}, {"name": "actions/upload-artifact", "SPDXID": "SPDXRef-Package-github-action-actions-upload-artifact-1c57fd226530a50d", "versionInfo": "v7.0.1", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /buildah-1.45.1/.github/workflows/ci.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/upload-artifact@v7.0.1"}]}, {"name": "actions/upload-artifact", "SPDXID": "SPDXRef-Package-github-action-actions-upload-artifact-0dff52be73641f10", "versionInfo": "v7.0.1", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /buildah-1.45.1/.github/workflows/lima.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/upload-artifact@v7.0.1"}]}, {"name": "codespell", "SPDXID": "SPDXRef-Package-python-codespell-90cdfc7d885a6555", "versionInfo": "2.4.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from installed python package manifest file: /buildah-1.45.1/vendor/go.opentelemetry.io/otel/requirements.txt", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python-codespell:python-codespell:2.4.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python-codespell:python_codespell:2.4.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python_codespell:python-codespell:2.4.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python_codespell:python_codespell:2.4.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:codespell:python-codespell:2.4.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:codespell:python_codespell:2.4.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python-codespell:codespell:2.4.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python_codespell:codespell:2.4.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python:python-codespell:2.4.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python:python_codespell:2.4.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:codespell:codespell:2.4.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python:codespell:2.4.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:pypi/codespell@2.4.2"}]}, {"name": "cyphar.com/go-pathrs", "SPDXID": "SPDXRef-Package-go-module-cyphar.com-go-pathrs-2d8e4ec86d2e5382", "versionInfo": "v0.2.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cyphar.com/go-pathrs@v0.2.5"}]}, {"name": "dario.cat/mergo", "SPDXID": "SPDXRef-Package-go-module-dario.cat-mergo-bb7ea264dc855694", "versionInfo": "v1.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/dario.cat/mergo@v1.0.2"}]}, {"name": "dorny/paths-filter", "SPDXID": "SPDXRef-Package-github-action-dorny-paths-filter-611f48a2055c57a6", "versionInfo": "v4.0.2", "supplier": "Organization: dorny", "originator": "Organization: dorny", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /buildah-1.45.1/.github/workflows/ci.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dorny\\/paths-filter:dorny\\/paths-filter:v4.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dorny\\/paths-filter:dorny\\/paths_filter:v4.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dorny\\/paths_filter:dorny\\/paths-filter:v4.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dorny\\/paths_filter:dorny\\/paths_filter:v4.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dorny\\/paths:dorny\\/paths-filter:v4.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dorny\\/paths:dorny\\/paths_filter:v4.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/dorny/paths-filter@v4.0.2"}]}, {"name": "github.com/Azure/go-ansiterm", "SPDXID": "SPDXRef-Package-go-module-github.com-Azure-go-ansiterm-6bea16b82bcc34e8", "versionInfo": "v0.0.0-20250102033503-faa5f7b0171c", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Azure:go-ansiterm:v0.0.0-20250102033503-faa5f7b0171c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Azure:go_ansiterm:v0.0.0-20250102033503-faa5f7b0171c:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Azure/go-ansiterm@v0.0.0-20250102033503-faa5f7b0171c"}]}, {"name": "github.com/BurntSushi/toml", "SPDXID": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-d32685516e140603", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:BurntSushi:toml:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/BurntSushi/toml@v1.6.0"}]}, {"name": "github.com/Microsoft/go-winio", "SPDXID": "SPDXRef-Package-go-module-github.com-Microsoft-go-winio-59cafe4b91df1cf1", "versionInfo": "v0.6.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Microsoft:go-winio:v0.6.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Microsoft:go_winio:v0.6.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Microsoft/go-winio@v0.6.2"}]}, {"name": "github.com/ProtonMail/go-crypto", "SPDXID": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-23f68f22a35fcae5", "versionInfo": "v1.4.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ProtonMail:go-crypto:v1.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ProtonMail:go_crypto:v1.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/ProtonMail/go-crypto@v1.4.1"}]}, {"name": "github.com/VividCortex/ewma", "SPDXID": "SPDXRef-Package-go-module-github.com-VividCortex-ewma-06ba2bb85d7db359", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:VividCortex:ewma:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/VividCortex/ewma@v1.2.0"}]}, {"name": "github.com/acarl005/stripansi", "SPDXID": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-55b983922c9b1f8f", "versionInfo": "v0.0.0-20180116102854-5a71ef0e047d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:acarl005:stripansi:v0.0.0-20180116102854-5a71ef0e047d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/acarl005/stripansi@v0.0.0-20180116102854-5a71ef0e047d"}]}, {"name": "github.com/aead/serpent", "SPDXID": "SPDXRef-Package-go-module-github.com-aead-serpent-f32a1a590756ecf5", "versionInfo": "v0.0.0-20160714141033-fba169763ea6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aead:serpent:v0.0.0-20160714141033-fba169763ea6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aead/serpent@v0.0.0-20160714141033-fba169763ea6"}]}, {"name": "github.com/cespare/xxhash/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-a9e87098c205ea17", "versionInfo": "v2.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cespare/xxhash@v2.3.0#v2"}]}, {"name": "github.com/chzyer/readline", "SPDXID": "SPDXRef-Package-go-module-github.com-chzyer-readline-ea3c8d91ff897fe6", "versionInfo": "v1.5.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:chzyer:readline:v1.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/chzyer/readline@v1.5.1"}]}, {"name": "github.com/clipperhouse/uax29/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-8979a333bb24fb3b", "versionInfo": "v2.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:clipperhouse:uax29\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/clipperhouse/uax29@v2.7.0#v2"}]}, {"name": "github.com/cloudflare/circl", "SPDXID": "SPDXRef-Package-go-module-github.com-cloudflare-circl-e1be76f73421a35f", "versionInfo": "v1.6.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cloudflare:circl:v1.6.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cloudflare/circl@v1.6.3"}]}, {"name": "github.com/containerd/errdefs", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-errdefs-0252838cbbb07f3e", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:errdefs:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/errdefs@v1.0.0"}]}, {"name": "github.com/containerd/errdefs/pkg", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-fdaf37d35db282f5", "versionInfo": "v0.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:errdefs\\/pkg:v0.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/errdefs@v0.3.0#pkg"}]}, {"name": "github.com/containerd/log", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-log-64de32bccd000255", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:log:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/log@v0.1.0"}]}, {"name": "github.com/containerd/platforms", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-platforms-f71bc177852bb0ec", "versionInfo": "v1.0.0-rc.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:platforms:v1.0.0-rc.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/platforms@v1.0.0-rc.4"}]}, {"name": "github.com/containerd/stargz-snapshotter/estargz", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-stargz-snapshotter-estargz-2fe9b3a2c1e710e7", "versionInfo": "v0.18.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:stargz-snapshotter\\/estargz:v0.18.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:stargz_snapshotter\\/estargz:v0.18.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/stargz-snapshotter@v0.18.2#estargz"}]}, {"name": "github.com/containerd/typeurl/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-84b8482d66366887", "versionInfo": "v2.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:typeurl\\/v2:v2.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/typeurl@v2.3.0#v2"}]}, {"name": "github.com/containers/libtrust", "SPDXID": "SPDXRef-Package-go-module-github.com-containers-libtrust-675d43ee0d59d44a", "versionInfo": "v0.0.0-20230121012942-c1716e8a8d01", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containers:libtrust:v0.0.0-20230121012942-c1716e8a8d01:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containers/libtrust@v0.0.0-20230121012942-c1716e8a8d01"}]}, {"name": "github.com/containers/luksy", "SPDXID": "SPDXRef-Package-go-module-github.com-containers-luksy-fab6ac09e5fdfcd9", "versionInfo": "v0.0.0-20251208191447-ca096313c38f", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containers:luksy:v0.0.0-20251208191447-ca096313c38f:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containers/luksy@v0.0.0-20251208191447-ca096313c38f"}]}, {"name": "github.com/containers/ocicrypt", "SPDXID": "SPDXRef-Package-go-module-github.com-containers-ocicrypt-7d54cc1d2f0cf937", "versionInfo": "v1.3.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containers:ocicrypt:v1.3.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containers/ocicrypt@v1.3.2"}]}, {"name": "github.com/coreos/go-systemd/v22", "SPDXID": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-v22-dc3a5de68ba3a95d", "versionInfo": "v22.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go-systemd\\/v22:v22.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go_systemd\\/v22:v22.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/coreos/go-systemd@v22.7.0#v22"}]}, {"name": "github.com/cpuguy83/go-md2man/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-cpuguy83-go-md2man-v2-8541acd97ec83901", "versionInfo": "v2.0.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/tests/tools/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cpuguy83:go-md2man\\/v2:v2.0.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cpuguy83:go_md2man\\/v2:v2.0.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cpuguy83/go-md2man@v2.0.4#v2"}]}, {"name": "github.com/cyberphone/json-canonicalization", "SPDXID": "SPDXRef-Package-go-module-github.com-cyberphone-json-canonicalization-76e06993d0f0c08e", "versionInfo": "v0.0.0-20241213102144-19d51d7fe467", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyberphone:json-canonicalization:v0.0.0-20241213102144-19d51d7fe467:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyberphone:json_canonicalization:v0.0.0-20241213102144-19d51d7fe467:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cyberphone/json-canonicalization@v0.0.0-20241213102144-19d51d7fe467"}]}, {"name": "github.com/cyphar/filepath-securejoin", "SPDXID": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-f8fcfa03fbcf24fe", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyphar:filepath-securejoin:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyphar:filepath_securejoin:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cyphar/filepath-securejoin@v0.7.0"}]}, {"name": "github.com/davecgh/go-spew", "SPDXID": "SPDXRef-Package-go-module-github.com-davecgh-go-spew-262622bf95c8865c", "versionInfo": "v1.1.2-0.20180830191138-d8f796af33cc", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:davecgh:go-spew:v1.1.2-0.20180830191138-d8f796af33cc:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:davecgh:go_spew:v1.1.2-0.20180830191138-d8f796af33cc:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc"}]}, {"name": "github.com/disiqueira/gotree/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-disiqueira-gotree-v3-d84dc1568812a310", "versionInfo": "v3.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:disiqueira:gotree\\/v3:v3.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/disiqueira/gotree@v3.0.2#v3"}]}, {"name": "github.com/distribution/reference", "SPDXID": "SPDXRef-Package-go-module-github.com-distribution-reference-e48a8505fd267500", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:distribution:reference:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/distribution/reference@v0.6.0"}]}, {"name": "github.com/docker/distribution", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-distribution-5b8ce5965703947b", "versionInfo": "v2.8.3+incompatible", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:distribution:v2.8.3\\+incompatible:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/distribution@v2.8.3%2Bincompatible"}]}, {"name": "github.com/docker/docker-credential-helpers", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-63c5ebe7885ef18d", "versionInfo": "v0.9.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:docker-credential-helpers:v0.9.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:docker_credential_helpers:v0.9.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.8"}]}, {"name": "github.com/docker/go-connections", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-go-connections-dfac74681558c2d8", "versionInfo": "v0.8.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go-connections:v0.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go_connections:v0.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/go-connections@v0.8.1"}]}, {"name": "github.com/docker/go-units", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-go-units-1f460b1805fe5c3c", "versionInfo": "v0.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go-units:v0.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go_units:v0.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/go-units@v0.5.0"}]}, {"name": "github.com/felixge/httpsnoop", "SPDXID": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-22c346abff5e71aa", "versionInfo": "v1.0.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:felixge:httpsnoop:v1.0.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/felixge/httpsnoop@v1.0.4"}]}, {"name": "github.com/fsnotify/fsnotify", "SPDXID": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-4e2185f4fcb4c512", "versionInfo": "v1.10.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fsnotify:fsnotify:v1.10.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fsnotify/fsnotify@v1.10.1"}]}, {"name": "github.com/fsouza/go-dockerclient", "SPDXID": "SPDXRef-Package-go-module-github.com-fsouza-go-dockerclient-c954f8996149cb7a", "versionInfo": "v1.13.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fsouza:go-dockerclient:v1.13.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fsouza:go_dockerclient:v1.13.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fsouza/go-dockerclient@v1.13.2"}]}, {"name": "github.com/go-jose/go-jose/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-cd8e5a71669b8eaa", "versionInfo": "v4.1.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-jose/go-jose@v4.1.4#v4"}]}, {"name": "github.com/go-logr/logr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-logr-0e5964a7ba20da05", "versionInfo": "v1.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:logr:v1.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:logr:v1.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:logr:v1.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/logr@v1.4.3"}]}, {"name": "github.com/go-logr/stdr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-stdr-cdebc2e8006c92cc", "versionInfo": "v1.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/stdr@v1.2.2"}]}, {"name": "github.com/godbus/dbus/v5", "SPDXID": "SPDXRef-Package-go-module-github.com-godbus-dbus-v5-c57363089f17a748", "versionInfo": "v5.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:godbus:dbus\\/v5:v5.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/godbus/dbus@v5.2.2#v5"}]}, {"name": "github.com/google/go-containerregistry", "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-3c6d280ffe97a035", "versionInfo": "v0.21.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go-containerregistry:v0.21.6:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go_containerregistry:v0.21.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/go-containerregistry@v0.21.6"}]}, {"name": "github.com/google/go-intervals", "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-intervals-d7f354a04a4c6880", "versionInfo": "v0.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go-intervals:v0.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go_intervals:v0.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/go-intervals@v0.0.2"}]}, {"name": "github.com/google/uuid", "SPDXID": "SPDXRef-Package-go-module-github.com-google-uuid-d6bc6c47287c2f41", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/uuid@v1.6.0"}]}, {"name": "github.com/gorilla/mux", "SPDXID": "SPDXRef-Package-go-module-github.com-gorilla-mux-87b8ff0a59e2e3c6", "versionInfo": "v1.8.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gorilla:mux:v1.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gorilla/mux@v1.8.1"}]}, {"name": "github.com/hashicorp/errwrap", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-596cc87a8ff1183e", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:errwrap:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0"}]}, {"name": "github.com/hashicorp/go-multierror", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-19e3ecfb81a0d2bc", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-multierror:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_multierror:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1"}]}, {"name": "github.com/inconshreveable/mousetrap", "SPDXID": "SPDXRef-Package-go-module-github.com-inconshreveable-mousetrap-6accf35c39498b1e", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:inconshreveable:mousetrap:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/inconshreveable/mousetrap@v1.1.0"}]}, {"name": "github.com/jinzhu/copier", "SPDXID": "SPDXRef-Package-go-module-github.com-jinzhu-copier-b1e1b8476b551d13", "versionInfo": "v0.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jinzhu:copier:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jinzhu/copier@v0.4.0"}]}, {"name": "github.com/json-iterator/go", "SPDXID": "SPDXRef-Package-go-module-github.com-json-iterator-go-508911173678cba3", "versionInfo": "v1.1.12", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json-iterator:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json_iterator:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/json-iterator/go@v1.1.12"}]}, {"name": "github.com/klauspost/compress", "SPDXID": "SPDXRef-Package-go-module-github.com-klauspost-compress-02da361f7eaac64a", "versionInfo": "v1.19.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:klauspost:compress:v1.19.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/klauspost/compress@v1.19.1"}]}, {"name": "github.com/klauspost/pgzip", "SPDXID": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-d6f43d57d72aea1c", "versionInfo": "v1.2.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:klauspost:pgzip:v1.2.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/klauspost/pgzip@v1.2.6"}]}, {"name": "github.com/kr/fs", "SPDXID": "SPDXRef-Package-go-module-github.com-kr-fs-874b8e48251aabf6", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:kr:fs:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/kr/fs@v0.1.0"}]}, {"name": "github.com/manifoldco/promptui", "SPDXID": "SPDXRef-Package-go-module-github.com-manifoldco-promptui-73a371a9b058a18c", "versionInfo": "v0.9.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:manifoldco:promptui:v0.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/manifoldco/promptui@v0.9.0"}]}, {"name": "github.com/mattn/go-runewidth", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-d8112a4cda175f3c", "versionInfo": "v0.0.27", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-runewidth:v0.0.27:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_runewidth:v0.0.27:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-runewidth@v0.0.27"}]}, {"name": "github.com/mattn/go-shellwords", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-00228dc90922d7a8", "versionInfo": "v1.0.14", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-shellwords:v1.0.14:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_shellwords:v1.0.14:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-shellwords@v1.0.14"}]}, {"name": "github.com/mattn/go-sqlite3", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-sqlite3-83ea74103aea903a", "versionInfo": "v1.14.48", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-sqlite3:v1.14.48:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_sqlite3:v1.14.48:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-sqlite3@v1.14.48"}]}, {"name": "github.com/miekg/pkcs11", "SPDXID": "SPDXRef-Package-go-module-github.com-miekg-pkcs11-dc5b826e6f14bbe9", "versionInfo": "v1.1.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:miekg:pkcs11:v1.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/miekg/pkcs11@v1.1.2"}]}, {"name": "github.com/mistifyio/go-zfs/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-mistifyio-go-zfs-v4-174ae057fa81b631", "versionInfo": "v4.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mistifyio:go-zfs\\/v4:v4.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mistifyio:go_zfs\\/v4:v4.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mistifyio/go-zfs@v4.0.0#v4"}]}, {"name": "github.com/moby/buildkit", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-buildkit-25f139ca82311e66", "versionInfo": "v0.31.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:buildkit:v0.31.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/buildkit@v0.31.2"}]}, {"name": "github.com/moby/docker-image-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-861b2232b9b63ca1", "versionInfo": "v1.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:docker-image-spec:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:docker_image_spec:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/docker-image-spec@v1.3.1"}]}, {"name": "github.com/moby/go-archive", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-go-archive-ff1d97ee9e90217b", "versionInfo": "v0.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:go-archive:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:go_archive:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/go-archive@v0.2.0"}]}, {"name": "github.com/moby/moby/api", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-moby-api-d68b54481da65a50", "versionInfo": "v1.55.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:moby\\/api:v1.55.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/moby@v1.55.0#api"}]}, {"name": "github.com/moby/moby/client", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-moby-client-4436f2b2794cb57d", "versionInfo": "v0.5.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:moby\\/client:v0.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/moby@v0.5.1#client"}]}, {"name": "github.com/moby/patternmatcher", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-32bd7ae500ba8634", "versionInfo": "v0.6.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:patternmatcher:v0.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/patternmatcher@v0.6.1"}]}, {"name": "github.com/moby/sys/capability", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-capability-d2489a1dc937ae05", "versionInfo": "v0.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/capability:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.4.0#capability"}]}, {"name": "github.com/moby/sys/devices", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-devices-7ef390d738a70f55", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/devices:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.1.0#devices"}]}, {"name": "github.com/moby/sys/mountinfo", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-2ea99c0c77bf9ebc", "versionInfo": "v0.7.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/mountinfo:v0.7.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.7.2#mountinfo"}]}, {"name": "github.com/moby/sys/sequential", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-9e79f6582c7104e4", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/sequential:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.7.0#sequential"}]}, {"name": "github.com/moby/sys/user", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-user-72ffaed3df287dfe", "versionInfo": "v0.4.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/user:v0.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.4.1#user"}]}, {"name": "github.com/moby/sys/userns", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-userns-fb077919511efaf2", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/userns:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.1.0#userns"}]}, {"name": "github.com/moby/term", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-term-3099125c5a87befb", "versionInfo": "v0.5.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:term:v0.5.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/term@v0.5.2"}]}, {"name": "github.com/modern-go/concurrent", "SPDXID": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-4ad008ccfda82364", "versionInfo": "v0.0.0-20180306012644-bacd9c7ef1dd", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern-go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern_go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd"}]}, {"name": "github.com/modern-go/reflect2", "SPDXID": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-62ad0a986b9411dc", "versionInfo": "v1.0.3-0.20250322232337-35a7c28c31ee", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern-go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern_go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee"}]}, {"name": "github.com/opencontainers/cgroups", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-cgroups-c4db25b2532edbe7", "versionInfo": "v0.0.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:cgroups:v0.0.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/cgroups@v0.0.8"}]}, {"name": "github.com/opencontainers/go-digest", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-39820517e2ec8bc2", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:go-digest:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:go_digest:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0"}]}, {"name": "github.com/opencontainers/image-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-fc8a990ed94de460", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:image-spec:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:image_spec:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1"}]}, {"name": "github.com/opencontainers/runc", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-runc-1efa7d3515126922", "versionInfo": "v1.5.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runc:v1.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/runc@v1.5.1"}]}, {"name": "github.com/opencontainers/runtime-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-49c66f63cdf58c81", "versionInfo": "v1.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime-spec:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime_spec:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/runtime-spec@v1.3.0"}]}, {"name": "github.com/opencontainers/runtime-tools", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-tools-64a82c01af80da5e", "versionInfo": "v0.9.1-0.20260316125833-8a4db579f5c8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime-tools:v0.9.1-0.20260316125833-8a4db579f5c8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime_tools:v0.9.1-0.20260316125833-8a4db579f5c8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/runtime-tools@v0.9.1-0.20260316125833-8a4db579f5c8"}]}, {"name": "github.com/opencontainers/selinux", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-selinux-7387e4f3f706d28f", "versionInfo": "v1.15.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:selinux:v1.15.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/selinux@v1.15.1"}]}, {"name": "github.com/openshift/imagebuilder", "SPDXID": "SPDXRef-Package-go-module-github.com-openshift-imagebuilder-81b345862fd745b5", "versionInfo": "v1.2.21", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:openshift:imagebuilder:v1.2.21:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/openshift/imagebuilder@v1.2.21"}]}, {"name": "github.com/pkg/errors", "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-errors-474bf2f388afe342", "versionInfo": "v0.9.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pkg/errors@v0.9.1"}]}, {"name": "github.com/pkg/sftp", "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-sftp-12ea976afd3c9be6", "versionInfo": "v1.13.11", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pkg:sftp:v1.13.11:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pkg/sftp@v1.13.11"}]}, {"name": "github.com/planetscale/vtprotobuf", "SPDXID": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-b15c3f1db2032118", "versionInfo": "v0.6.1-0.20240319094008-0393e58bdf10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:planetscale:vtprotobuf:v0.6.1-0.20240319094008-0393e58bdf10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10"}]}, {"name": "github.com/pmezard/go-difflib", "SPDXID": "SPDXRef-Package-go-module-github.com-pmezard-go-difflib-25963aceaa6dfd23", "versionInfo": "v1.0.1-0.20181226105442-5d4384ee4fb2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pmezard:go-difflib:v1.0.1-0.20181226105442-5d4384ee4fb2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pmezard:go_difflib:v1.0.1-0.20181226105442-5d4384ee4fb2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pmezard/go-difflib@v1.0.1-0.20181226105442-5d4384ee4fb2"}]}, {"name": "github.com/proglottis/gpgme", "SPDXID": "SPDXRef-Package-go-module-github.com-proglottis-gpgme-ff56132de51ac46c", "versionInfo": "v0.1.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gpgme_project:gpgme:v0.1.6:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/proglottis/gpgme@v0.1.6"}]}, {"name": "github.com/russross/blackfriday/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-russross-blackfriday-v2-ca0b42e616d3a00a", "versionInfo": "v2.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/tests/tools/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:russross:blackfriday\\/v2:v2.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/russross/blackfriday@v2.1.0#v2"}]}, {"name": "github.com/seccomp/libseccomp-golang", "SPDXID": "SPDXRef-Package-go-module-github.com-seccomp-libseccomp-golang-a5cb543cf0960336", "versionInfo": "v0.11.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:seccomp:libseccomp-golang:v0.11.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:seccomp:libseccomp_golang:v0.11.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/seccomp/libseccomp-golang@v0.11.1"}]}, {"name": "github.com/secure-systems-lab/go-securesystemslib", "SPDXID": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-2c219eddaf3f07cd", "versionInfo": "v0.11.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure-systems-lab:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure-systems-lab:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure_systems_lab:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure_systems_lab:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure-systems:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure-systems:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure_systems:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure_systems:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.11.0"}]}, {"name": "github.com/sigstore/fulcio", "SPDXID": "SPDXRef-Package-go-module-github.com-sigstore-fulcio-3b8471856bdaf854", "versionInfo": "v1.8.7", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sigstore:fulcio:v1.8.7:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sigstore/fulcio@v1.8.7"}]}, {"name": "github.com/sigstore/protobuf-specs", "SPDXID": "SPDXRef-Package-go-module-github.com-sigstore-protobuf-specs-74889e271e2caf3d", "versionInfo": "v0.5.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sigstore:protobuf-specs:v0.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sigstore:protobuf_specs:v0.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sigstore/protobuf-specs@v0.5.1"}]}, {"name": "github.com/sigstore/sigstore", "SPDXID": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-f3c4f942d1d27a73", "versionInfo": "v1.10.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sigstore:sigstore:v1.10.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sigstore/sigstore@v1.10.8"}]}, {"name": "github.com/sirupsen/logrus", "SPDXID": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-9fc7888039937818", "versionInfo": "v1.9.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sirupsen:logrus:v1.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sirupsen/logrus@v1.9.4"}]}, {"name": "github.com/smallstep/pkcs7", "SPDXID": "SPDXRef-Package-go-module-github.com-smallstep-pkcs7-02b22be6cb71a71a", "versionInfo": "v0.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:smallstep:pkcs7:v0.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/smallstep/pkcs7@v0.2.1"}]}, {"name": "github.com/spf13/cobra", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-cobra-701c746189c7eb97", "versionInfo": "v1.10.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:cobra:v1.10.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/cobra@v1.10.2"}]}, {"name": "github.com/spf13/pflag", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-pflag-a1fe40363b85f0e2", "versionInfo": "v1.0.10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:pflag:v1.0.10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/pflag@v1.0.10"}]}, {"name": "github.com/stefanberger/go-pkcs11uri", "SPDXID": "SPDXRef-Package-go-module-github.com-stefanberger-go-pkcs11uri-0ab52bead0039fd9", "versionInfo": "v0.0.0-20230803200340-78284954bff6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:stefanberger:go-pkcs11uri:v0.0.0-20230803200340-78284954bff6:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:stefanberger:go_pkcs11uri:v0.0.0-20230803200340-78284954bff6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/stefanberger/go-pkcs11uri@v0.0.0-20230803200340-78284954bff6"}]}, {"name": "github.com/stretchr/testify", "SPDXID": "SPDXRef-Package-go-module-github.com-stretchr-testify-e1f9a8f1eeda28da", "versionInfo": "v1.11.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:stretchr:testify:v1.11.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/stretchr/testify@v1.11.1"}]}, {"name": "github.com/sylabs/sif/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-e3211d5469af8c26", "versionInfo": "v2.24.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sylabs:sif\\/v2:v2.24.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sylabs/sif@v2.24.1#v2"}]}, {"name": "github.com/tchap/go-patricia/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-tchap-go-patricia-v2-6df09934d5ac3fdd", "versionInfo": "v2.3.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tchap:go-patricia\\/v2:v2.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tchap:go_patricia\\/v2:v2.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/tchap/go-patricia@v2.3.3#v2"}]}, {"name": "github.com/tonistiigi/dchapes-mode", "SPDXID": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-2832745d82445e27", "versionInfo": "v0.0.0-20250318174251-73d941a28323", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tonistiigi:dchapes-mode:v0.0.0-20250318174251-73d941a28323:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tonistiigi:dchapes_mode:v0.0.0-20250318174251-73d941a28323:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/tonistiigi/dchapes-mode@v0.0.0-20250318174251-73d941a28323"}]}, {"name": "github.com/ulikunitz/xz", "SPDXID": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-bfaf5559d1935089", "versionInfo": "v0.5.16", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ulikunitz:xz:v0.5.16:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/ulikunitz/xz@v0.5.16"}]}, {"name": "github.com/vbatts/tar-split", "SPDXID": "SPDXRef-Package-go-module-github.com-vbatts-tar-split-dc04ca8c69b0ef96", "versionInfo": "v0.12.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbatts:tar-split:v0.12.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbatts:tar_split:v0.12.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vbatts/tar-split@v0.12.3"}]}, {"name": "github.com/vbauerster/cupwriter", "SPDXID": "SPDXRef-Package-go-module-github.com-vbauerster-cupwriter-a5d802201b35ea8c", "versionInfo": "v0.0.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbauerster:cupwriter:v0.0.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vbauerster/cupwriter@v0.0.4"}]}, {"name": "github.com/vbauerster/mpb/v8", "SPDXID": "SPDXRef-Package-go-module-github.com-vbauerster-mpb-v8-3612c02f29a75362", "versionInfo": "v8.14.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbauerster:mpb\\/v8:v8.14.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vbauerster/mpb@v8.14.0#v8"}]}, {"name": "github.com/vishvananda/netlink", "SPDXID": "SPDXRef-Package-go-module-github.com-vishvananda-netlink-a75c27634d6eac1f", "versionInfo": "v1.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vishvananda:netlink:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vishvananda/netlink@v1.3.1"}]}, {"name": "github.com/vishvananda/netns", "SPDXID": "SPDXRef-Package-go-module-github.com-vishvananda-netns-53c4e6214f2cc0f7", "versionInfo": "v0.0.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vishvananda:netns:v0.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vishvananda/netns@v0.0.5"}]}, {"name": "github.com/youmark/pkcs8", "SPDXID": "SPDXRef-Package-go-module-github.com-youmark-pkcs8-d7ecada3f86576aa", "versionInfo": "v0.0.0-20240726163527-a2c0da244d78", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:youmark:pkcs8:v0.0.0-20240726163527-a2c0da244d78:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/youmark/pkcs8@v0.0.0-20240726163527-a2c0da244d78"}]}, {"name": "go.etcd.io/bbolt", "SPDXID": "SPDXRef-Package-go-module-go.etcd.io-bbolt-053aa1d76845cfe0", "versionInfo": "v1.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.etcd.io/bbolt@v1.5.0"}]}, {"name": "go.opentelemetry.io/auto/sdk", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-dff33bba7b72fa5f", "versionInfo": "v1.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:auto:sdk:v1.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1"}]}, {"name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-8bc51ea2f12f3837", "versionInfo": "v0.69.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/otelhttp:v0.69.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation@v0.69.0#net/http/otelhttp"}]}, {"name": "go.opentelemetry.io/otel", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-8031c1a1c2921dde", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel@v1.44.0"}]}, {"name": "go.opentelemetry.io/otel/metric", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-3452f5fe9f6690fd", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:metric:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/metric@v1.44.0"}]}, {"name": "go.opentelemetry.io/otel/trace", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-460abf6e1309fb4a", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:trace:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/trace@v1.44.0"}]}, {"name": "go.podman.io/common", "SPDXID": "SPDXRef-Package-go-module-go.podman.io-common-21236ecfcd1c15ca", "versionInfo": "v0.69.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.podman.io/common@v0.69.2"}]}, {"name": "go.podman.io/image/v5", "SPDXID": "SPDXRef-Package-go-module-go.podman.io-image-v5-ce30e55fd246afdf", "versionInfo": "v5.41.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:image:v5:v5.41.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.podman.io/image/v5@v5.41.2"}]}, {"name": "go.podman.io/storage", "SPDXID": "SPDXRef-Package-go-module-go.podman.io-storage-41ee67f7b84eb07a", "versionInfo": "v1.64.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.podman.io/storage@v1.64.1"}]}, {"name": "go.yaml.in/yaml/v2", "SPDXID": "SPDXRef-Package-go-module-go.yaml.in-yaml-v2-0aba9b8903bc6dd6", "versionInfo": "v2.4.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml:v2:v2.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.yaml.in/yaml/v2@v2.4.4"}]}, {"name": "go.yaml.in/yaml/v3", "SPDXID": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-5d4e4539d61c9e54", "versionInfo": "v3.0.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml:v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.yaml.in/yaml/v3@v3.0.5"}]}, {"name": "golang.org/x/crypto", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-crypto-4d18e88db2531fed", "versionInfo": "v0.56.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:ssh:v0.56.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/crypto@v0.56.0"}]}, {"name": "golang.org/x/mod", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-mod-62825d283e5b165a", "versionInfo": "v0.38.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/mod:v0.38.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/mod@v0.38.0"}]}, {"name": "golang.org/x/net", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-net-e09b530c0eb878f7", "versionInfo": "v0.57.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:networking:v0.57.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/net@v0.57.0"}]}, {"name": "golang.org/x/sync", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sync-2a85c5ac5f84c365", "versionInfo": "v0.22.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sync:v0.22.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sync@v0.22.0"}]}, {"name": "golang.org/x/sys", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sys-06a691dc2819f8aa", "versionInfo": "v0.47.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sys:v0.47.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sys@v0.47.0"}]}, {"name": "golang.org/x/term", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-term-fc8984f0380c7b24", "versionInfo": "v0.45.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/term:v0.45.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/term@v0.45.0"}]}, {"name": "golang.org/x/text", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-text-40bcae7fb951c375", "versionInfo": "v0.41.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:text:v0.41.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/text@v0.41.0"}]}, {"name": "google.golang.org/genproto/googleapis/api", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-0c7a66d3277dd6ea", "versionInfo": "v0.0.0-20260526163538-3dc84a4a5aaa", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260526163538-3dc84a4a5aaa:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260526163538-3dc84a4a5aaa#api"}]}, {"name": "google.golang.org/genproto/googleapis/rpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-5166c6dbad928efe", "versionInfo": "v0.0.0-20260526163538-3dc84a4a5aaa", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260526163538-3dc84a4a5aaa:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260526163538-3dc84a4a5aaa#rpc"}]}, {"name": "google.golang.org/grpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-grpc-8a5147188280b8ba", "versionInfo": "v1.82.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:grpc:v1.82.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/grpc@v1.82.1"}]}, {"name": "google.golang.org/protobuf", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-protobuf-c6c431023327850f", "versionInfo": "v1.36.11", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:protobuf:v1.36.11:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/protobuf@v1.36.11"}]}, {"name": "gopkg.in/yaml.v3", "SPDXID": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-616958b158d1a1b8", "versionInfo": "v3.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml_project:yaml:v3.0.1:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/gopkg.in/yaml.v3@v3.0.1"}]}, {"name": "k8s.io/klog", "SPDXID": "SPDXRef-Package-go-module-k8s.io-klog-c6175f681b47d672", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/k8s.io/klog@v1.0.0"}]}, {"name": "lima-vm/lima-actions/setup", "SPDXID": "SPDXRef-Package-github-action-lima-vm-lima-actions-setup-61d7289d94fb9c5f", "versionInfo": "v1.1.0", "supplier": "Organization: lima-vm", "originator": "Organization: lima-vm", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /buildah-1.45.1/.github/workflows/lima.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lima-vm\\/lima-actions\\/setup:lima-vm\\/lima-actions\\/setup:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lima-vm\\/lima-actions\\/setup:lima_vm\\/lima_actions\\/setup:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lima_vm\\/lima_actions\\/setup:lima-vm\\/lima-actions\\/setup:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lima_vm\\/lima_actions\\/setup:lima_vm\\/lima_actions\\/setup:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lima-vm\\/lima:lima-vm\\/lima-actions\\/setup:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lima-vm\\/lima:lima_vm\\/lima_actions\\/setup:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lima_vm\\/lima:lima-vm\\/lima-actions\\/setup:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lima_vm\\/lima:lima_vm\\/lima_actions\\/setup:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lima:lima-vm\\/lima-actions\\/setup:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lima:lima_vm\\/lima_actions\\/setup:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/lima-vm/lima-actions@v1.1.0#setup"}]}, {"name": "podman-container-tools/podman/.github/workflows/issue_pr_lock.yml", "SPDXID": "SPDXRef-Package-github-action-workflow-podman-container-tools-podman-.github-workflows-issue-pr-lock.yml-d1635a02b62bddcc", "versionInfo": "main", "supplier": "Organization: podman-container-tools", "originator": "Organization: podman-container-tools", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /buildah-1.45.1/.github/workflows/issue_pr_lock.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman-container-tools\\/podman\\/.github\\/workflows\\/issue-pr-lock.yml:podman-container-tools\\/podman\\/.github\\/workflows\\/issue-pr-lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman-container-tools\\/podman\\/.github\\/workflows\\/issue-pr-lock.yml:podman-container-tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman-container-tools\\/podman\\/.github\\/workflows\\/issue-pr-lock.yml:podman_container_tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman-container-tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:podman-container-tools\\/podman\\/.github\\/workflows\\/issue-pr-lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman-container-tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:podman-container-tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman-container-tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:podman_container_tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman_container_tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:podman-container-tools\\/podman\\/.github\\/workflows\\/issue-pr-lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman_container_tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:podman-container-tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman_container_tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:podman_container_tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman-container-tools\\/podman\\/.github\\/workflows\\/issue-pr:podman-container-tools\\/podman\\/.github\\/workflows\\/issue-pr-lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman-container-tools\\/podman\\/.github\\/workflows\\/issue-pr:podman-container-tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman-container-tools\\/podman\\/.github\\/workflows\\/issue-pr:podman_container_tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman-container-tools\\/podman\\/.github\\/workflows\\/issue_pr:podman-container-tools\\/podman\\/.github\\/workflows\\/issue-pr-lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman-container-tools\\/podman\\/.github\\/workflows\\/issue_pr:podman-container-tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman-container-tools\\/podman\\/.github\\/workflows\\/issue_pr:podman_container_tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman_container_tools\\/podman\\/.github\\/workflows\\/issue_pr:podman-container-tools\\/podman\\/.github\\/workflows\\/issue-pr-lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman_container_tools\\/podman\\/.github\\/workflows\\/issue_pr:podman-container-tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman_container_tools\\/podman\\/.github\\/workflows\\/issue_pr:podman_container_tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman-container-tools\\/podman\\/.github\\/workflows\\/issue:podman-container-tools\\/podman\\/.github\\/workflows\\/issue-pr-lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman-container-tools\\/podman\\/.github\\/workflows\\/issue:podman-container-tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman-container-tools\\/podman\\/.github\\/workflows\\/issue:podman_container_tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman_container_tools\\/podman\\/.github\\/workflows\\/issue:podman-container-tools\\/podman\\/.github\\/workflows\\/issue-pr-lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman_container_tools\\/podman\\/.github\\/workflows\\/issue:podman-container-tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman_container_tools\\/podman\\/.github\\/workflows\\/issue:podman_container_tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman-container:podman-container-tools\\/podman\\/.github\\/workflows\\/issue-pr-lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman-container:podman-container-tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman-container:podman_container_tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman_container:podman-container-tools\\/podman\\/.github\\/workflows\\/issue-pr-lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman_container:podman-container-tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman_container:podman_container_tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman:podman-container-tools\\/podman\\/.github\\/workflows\\/issue-pr-lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman:podman-container-tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman:podman_container_tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/podman-container-tools/podman@main#.github/workflows/issue_pr_lock.yml"}]}, {"name": "sigs.k8s.io/yaml", "SPDXID": "SPDXRef-Package-go-module-sigs.k8s.io-yaml-d050975696bfbe02", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/sigs.k8s.io/yaml@v1.6.0"}]}, {"name": "tags.cncf.io/container-device-interface", "SPDXID": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-3167543e7b3246f7", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/tags.cncf.io/container-device-interface@v1.1.0"}]}, {"name": "tags.cncf.io/container-device-interface/specs-go", "SPDXID": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-specs-go-6255947a73f8217d", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container-device-interface:specs-go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container-device-interface:specs_go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container_device_interface:specs-go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container_device_interface:specs_go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container-device:specs-go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container-device:specs_go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container_device:specs-go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container_device:specs_go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container:specs-go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container:specs_go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/tags.cncf.io/container-device-interface/specs-go@v1.1.0"}]}, {"name": "rpm-extracted/buildah-1.45.1-1.1.hum1.src", "SPDXID": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "buildah", "SPDXID": "SPDXRef-Package-rpm-buildah-9d3bb49d2b16d861", "versionInfo": "1.45.1-1.1.hum1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from RPM DB: /usr/lib/debug/usr/bin/buildah-1.45.1-1.1.hum1.aarch64.debug", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:buildah:buildah:1.45.1-1.1.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/hummingbird/buildah@1.45.1-1.1.hum1?distro=hummingbird-1"}]}, {"name": "rpm-extracted/buildah-debuginfo-1.45.1-1.1.hum1.aarch64", "SPDXID": "SPDXRef-Directory-Root-buildah-debuginfo-1.45.1-1.1.hum1.aarch64", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "rpm-extracted/buildah-debugsource-1.45.1-1.1.hum1.aarch64", "SPDXID": "SPDXRef-Directory-Root-buildah-debugsource-1.45.1-1.1.hum1.aarch64", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "buildah", "SPDXID": "SPDXRef-Package-rpm-buildah-66a40dc1c37ca369", "versionInfo": "1.45.1-1.1.hum1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from RPM DB: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:buildah:buildah:1.45.1-1.1.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/hummingbird/buildah@1.45.1-1.1.hum1?distro=hummingbird-1"}]}, {"name": "dario.cat/mergo", "SPDXID": "SPDXRef-Package-go-module-dario.cat-mergo-59174a8be3ac1a4b", "versionInfo": "v1.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/dario.cat/mergo@v1.0.2"}]}, {"name": "github.com/BurntSushi/toml", "SPDXID": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-ca0a97a4e41c9301", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:BurntSushi:toml:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/BurntSushi/toml@v1.6.0"}]}, {"name": "github.com/ProtonMail/go-crypto", "SPDXID": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-42fdba04b2372867", "versionInfo": "v1.4.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ProtonMail:go-crypto:v1.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ProtonMail:go_crypto:v1.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/ProtonMail/go-crypto@v1.4.1"}]}, {"name": "github.com/VividCortex/ewma", "SPDXID": "SPDXRef-Package-go-module-github.com-VividCortex-ewma-696620e3c696ce29", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:VividCortex:ewma:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/VividCortex/ewma@v1.2.0"}]}, {"name": "github.com/acarl005/stripansi", "SPDXID": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-97db166f3446b2fb", "versionInfo": "v0.0.0-20180116102854-5a71ef0e047d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:acarl005:stripansi:v0.0.0-20180116102854-5a71ef0e047d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/acarl005/stripansi@v0.0.0-20180116102854-5a71ef0e047d"}]}, {"name": "github.com/aead/serpent", "SPDXID": "SPDXRef-Package-go-module-github.com-aead-serpent-7772991f9d1da505", "versionInfo": "v0.0.0-20160714141033-fba169763ea6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aead:serpent:v0.0.0-20160714141033-fba169763ea6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aead/serpent@v0.0.0-20160714141033-fba169763ea6"}]}, {"name": "github.com/cespare/xxhash/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-ca792a3e0fe9340d", "versionInfo": "v2.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cespare/xxhash@v2.3.0#v2"}]}, {"name": "github.com/chzyer/readline", "SPDXID": "SPDXRef-Package-go-module-github.com-chzyer-readline-1a4812ac60d2334b", "versionInfo": "v1.5.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:chzyer:readline:v1.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/chzyer/readline@v1.5.1"}]}, {"name": "github.com/clipperhouse/uax29/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-0c01821ce8bcc054", "versionInfo": "v2.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:clipperhouse:uax29\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/clipperhouse/uax29@v2.7.0#v2"}]}, {"name": "github.com/cloudflare/circl", "SPDXID": "SPDXRef-Package-go-module-github.com-cloudflare-circl-15805c8eea3e0e3b", "versionInfo": "v1.6.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cloudflare:circl:v1.6.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cloudflare/circl@v1.6.3"}]}, {"name": "github.com/containerd/errdefs", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-errdefs-37b74d847f8a82f7", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:errdefs:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/errdefs@v1.0.0"}]}, {"name": "github.com/containerd/errdefs/pkg", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-b1700612bf15a3c4", "versionInfo": "v0.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:errdefs\\/pkg:v0.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/errdefs@v0.3.0#pkg"}]}, {"name": "github.com/containerd/log", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-log-2e1ff1104407958d", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:log:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/log@v0.1.0"}]}, {"name": "github.com/containerd/platforms", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-platforms-9e20e064ab3caf44", "versionInfo": "v1.0.0-rc.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:platforms:v1.0.0-rc.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/platforms@v1.0.0-rc.4"}]}, {"name": "github.com/containerd/stargz-snapshotter/estargz", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-stargz-snapshotter-estargz-5f3e889749124cdf", "versionInfo": "v0.18.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:stargz-snapshotter\\/estargz:v0.18.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:stargz_snapshotter\\/estargz:v0.18.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/stargz-snapshotter@v0.18.2#estargz"}]}, {"name": "github.com/containerd/typeurl/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-29b6f5378058b12b", "versionInfo": "v2.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:typeurl\\/v2:v2.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/typeurl@v2.3.0#v2"}]}, {"name": "github.com/containers/libtrust", "SPDXID": "SPDXRef-Package-go-module-github.com-containers-libtrust-0219a066024e2be2", "versionInfo": "v0.0.0-20230121012942-c1716e8a8d01", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containers:libtrust:v0.0.0-20230121012942-c1716e8a8d01:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containers/libtrust@v0.0.0-20230121012942-c1716e8a8d01"}]}, {"name": "github.com/containers/luksy", "SPDXID": "SPDXRef-Package-go-module-github.com-containers-luksy-8e5a6f7c88fdea9a", "versionInfo": "v0.0.0-20251208191447-ca096313c38f", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containers:luksy:v0.0.0-20251208191447-ca096313c38f:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containers/luksy@v0.0.0-20251208191447-ca096313c38f"}]}, {"name": "github.com/containers/ocicrypt", "SPDXID": "SPDXRef-Package-go-module-github.com-containers-ocicrypt-07b9f07485e23d3e", "versionInfo": "v1.3.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containers:ocicrypt:v1.3.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containers/ocicrypt@v1.3.2"}]}, {"name": "github.com/coreos/go-systemd/v22", "SPDXID": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-v22-5739d8e9fe1ed748", "versionInfo": "v22.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go-systemd\\/v22:v22.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go_systemd\\/v22:v22.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/coreos/go-systemd@v22.7.0#v22"}]}, {"name": "github.com/cyberphone/json-canonicalization", "SPDXID": "SPDXRef-Package-go-module-github.com-cyberphone-json-canonicalization-ed6ce3555983c0b2", "versionInfo": "v0.0.0-20241213102144-19d51d7fe467", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyberphone:json-canonicalization:v0.0.0-20241213102144-19d51d7fe467:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyberphone:json_canonicalization:v0.0.0-20241213102144-19d51d7fe467:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cyberphone/json-canonicalization@v0.0.0-20241213102144-19d51d7fe467"}]}, {"name": "github.com/cyphar/filepath-securejoin", "SPDXID": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-527b3310cfd122ca", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyphar:filepath-securejoin:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyphar:filepath_securejoin:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cyphar/filepath-securejoin@v0.7.0"}]}, {"name": "github.com/davecgh/go-spew", "SPDXID": "SPDXRef-Package-go-module-github.com-davecgh-go-spew-18581646c4331057", "versionInfo": "v1.1.2-0.20180830191138-d8f796af33cc", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:davecgh:go-spew:v1.1.2-0.20180830191138-d8f796af33cc:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:davecgh:go_spew:v1.1.2-0.20180830191138-d8f796af33cc:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc"}]}, {"name": "github.com/disiqueira/gotree/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-disiqueira-gotree-v3-1b5e5f55beeb478a", "versionInfo": "v3.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:disiqueira:gotree\\/v3:v3.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/disiqueira/gotree@v3.0.2#v3"}]}, {"name": "github.com/distribution/reference", "SPDXID": "SPDXRef-Package-go-module-github.com-distribution-reference-e90ad8b51d3c2dd4", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:distribution:reference:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/distribution/reference@v0.6.0"}]}, {"name": "github.com/docker/distribution", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-distribution-b615122c683e6ef8", "versionInfo": "v2.8.3+incompatible", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:distribution:v2.8.3\\+incompatible:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/distribution@v2.8.3%2Bincompatible"}]}, {"name": "github.com/docker/docker-credential-helpers", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-31aa36887e373f59", "versionInfo": "v0.9.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:docker-credential-helpers:v0.9.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:docker_credential_helpers:v0.9.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.8"}]}, {"name": "github.com/docker/go-connections", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-go-connections-c49fee52019d39db", "versionInfo": "v0.8.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go-connections:v0.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go_connections:v0.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/go-connections@v0.8.1"}]}, {"name": "github.com/docker/go-units", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-go-units-7d5dc6a92bc12fb9", "versionInfo": "v0.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go-units:v0.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go_units:v0.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/go-units@v0.5.0"}]}, {"name": "github.com/felixge/httpsnoop", "SPDXID": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-229bb65cc4ad4827", "versionInfo": "v1.0.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:felixge:httpsnoop:v1.0.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/felixge/httpsnoop@v1.0.4"}]}, {"name": "github.com/fsnotify/fsnotify", "SPDXID": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-f6ad4daf31685f64", "versionInfo": "v1.10.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fsnotify:fsnotify:v1.10.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fsnotify/fsnotify@v1.10.1"}]}, {"name": "github.com/fsouza/go-dockerclient", "SPDXID": "SPDXRef-Package-go-module-github.com-fsouza-go-dockerclient-8963f2ae066c3177", "versionInfo": "v1.13.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fsouza:go-dockerclient:v1.13.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fsouza:go_dockerclient:v1.13.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fsouza/go-dockerclient@v1.13.2"}]}, {"name": "github.com/go-jose/go-jose/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-f636f20b22a93382", "versionInfo": "v4.1.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-jose/go-jose@v4.1.4#v4"}]}, {"name": "github.com/go-logr/logr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-logr-b8fb128fb39709d8", "versionInfo": "v1.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:logr:v1.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:logr:v1.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:logr:v1.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/logr@v1.4.3"}]}, {"name": "github.com/go-logr/stdr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-stdr-b0810765ac9c152a", "versionInfo": "v1.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/stdr@v1.2.2"}]}, {"name": "github.com/godbus/dbus/v5", "SPDXID": "SPDXRef-Package-go-module-github.com-godbus-dbus-v5-1de1b436a623a1df", "versionInfo": "v5.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:godbus:dbus\\/v5:v5.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/godbus/dbus@v5.2.2#v5"}]}, {"name": "github.com/google/go-containerregistry", "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-7d354c35757c8f27", "versionInfo": "v0.21.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go-containerregistry:v0.21.6:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go_containerregistry:v0.21.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/go-containerregistry@v0.21.6"}]}, {"name": "github.com/google/go-intervals", "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-intervals-bf261685037e7e6b", "versionInfo": "v0.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go-intervals:v0.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go_intervals:v0.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/go-intervals@v0.0.2"}]}, {"name": "github.com/google/uuid", "SPDXID": "SPDXRef-Package-go-module-github.com-google-uuid-c064a8fc75a6a695", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/uuid@v1.6.0"}]}, {"name": "github.com/gorilla/mux", "SPDXID": "SPDXRef-Package-go-module-github.com-gorilla-mux-1c0b646c6d1fc7dd", "versionInfo": "v1.8.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gorilla:mux:v1.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gorilla/mux@v1.8.1"}]}, {"name": "github.com/hashicorp/errwrap", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-059d6988e78432f0", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:errwrap:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0"}]}, {"name": "github.com/hashicorp/go-multierror", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-75cb972dc77cea49", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-multierror:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_multierror:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1"}]}, {"name": "github.com/jinzhu/copier", "SPDXID": "SPDXRef-Package-go-module-github.com-jinzhu-copier-3754b98eaa9b451b", "versionInfo": "v0.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jinzhu:copier:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jinzhu/copier@v0.4.0"}]}, {"name": "github.com/json-iterator/go", "SPDXID": "SPDXRef-Package-go-module-github.com-json-iterator-go-e29ead619ca012f6", "versionInfo": "v1.1.12", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json-iterator:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json_iterator:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/json-iterator/go@v1.1.12"}]}, {"name": "github.com/klauspost/compress", "SPDXID": "SPDXRef-Package-go-module-github.com-klauspost-compress-47f130b840af0c6b", "versionInfo": "v1.19.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:klauspost:compress:v1.19.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/klauspost/compress@v1.19.1"}]}, {"name": "github.com/klauspost/pgzip", "SPDXID": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-afcc0ec1d847a1ed", "versionInfo": "v1.2.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:klauspost:pgzip:v1.2.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/klauspost/pgzip@v1.2.6"}]}, {"name": "github.com/kr/fs", "SPDXID": "SPDXRef-Package-go-module-github.com-kr-fs-d161d144cbab4450", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:kr:fs:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/kr/fs@v0.1.0"}]}, {"name": "github.com/manifoldco/promptui", "SPDXID": "SPDXRef-Package-go-module-github.com-manifoldco-promptui-be5c7e8d67a5620a", "versionInfo": "v0.9.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:manifoldco:promptui:v0.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/manifoldco/promptui@v0.9.0"}]}, {"name": "github.com/mattn/go-runewidth", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-08515491417b43af", "versionInfo": "v0.0.27", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-runewidth:v0.0.27:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_runewidth:v0.0.27:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-runewidth@v0.0.27"}]}, {"name": "github.com/mattn/go-shellwords", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-98357687696b1248", "versionInfo": "v1.0.14", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-shellwords:v1.0.14:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_shellwords:v1.0.14:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-shellwords@v1.0.14"}]}, {"name": "github.com/mattn/go-sqlite3", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-sqlite3-1d9f2fc919664cd0", "versionInfo": "v1.14.48", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-sqlite3:v1.14.48:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_sqlite3:v1.14.48:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-sqlite3@v1.14.48"}]}, {"name": "github.com/miekg/pkcs11", "SPDXID": "SPDXRef-Package-go-module-github.com-miekg-pkcs11-2fedfb0706e60eae", "versionInfo": "v1.1.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:miekg:pkcs11:v1.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/miekg/pkcs11@v1.1.2"}]}, {"name": "github.com/mistifyio/go-zfs/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-mistifyio-go-zfs-v4-0b1965e2474cb83d", "versionInfo": "v4.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mistifyio:go-zfs\\/v4:v4.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mistifyio:go_zfs\\/v4:v4.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mistifyio/go-zfs@v4.0.0#v4"}]}, {"name": "github.com/moby/buildkit", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-buildkit-6c482327d253f511", "versionInfo": "v0.31.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:buildkit:v0.31.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/buildkit@v0.31.2"}]}, {"name": "github.com/moby/docker-image-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-9210387e6b6f8833", "versionInfo": "v1.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:docker-image-spec:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:docker_image_spec:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/docker-image-spec@v1.3.1"}]}, {"name": "github.com/moby/go-archive", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-go-archive-0c66a72217abfab4", "versionInfo": "v0.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:go-archive:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:go_archive:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/go-archive@v0.2.0"}]}, {"name": "github.com/moby/moby/api", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-moby-api-ce84eba3654eaadc", "versionInfo": "v1.55.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:moby\\/api:v1.55.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/moby@v1.55.0#api"}]}, {"name": "github.com/moby/moby/client", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-moby-client-fd01e53191ad1d36", "versionInfo": "v0.5.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:moby\\/client:v0.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/moby@v0.5.1#client"}]}, {"name": "github.com/moby/patternmatcher", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-fe3b88426627c239", "versionInfo": "v0.6.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:patternmatcher:v0.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/patternmatcher@v0.6.1"}]}, {"name": "github.com/moby/sys/capability", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-capability-7c6481407411f8a5", "versionInfo": "v0.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/capability:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.4.0#capability"}]}, {"name": "github.com/moby/sys/devices", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-devices-0bba930954dfcd6c", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/devices:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.1.0#devices"}]}, {"name": "github.com/moby/sys/mountinfo", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-b22b4ef8adaed18a", "versionInfo": "v0.7.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/mountinfo:v0.7.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.7.2#mountinfo"}]}, {"name": "github.com/moby/sys/sequential", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-acb66c2b7614606b", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/sequential:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.7.0#sequential"}]}, {"name": "github.com/moby/sys/user", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-user-a15a283dcb24b8c6", "versionInfo": "v0.4.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/user:v0.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.4.1#user"}]}, {"name": "github.com/moby/sys/userns", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-userns-932829a91f1b5bd1", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/userns:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.1.0#userns"}]}, {"name": "github.com/moby/term", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-term-9f3261e1d3e7fb1f", "versionInfo": "v0.5.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:term:v0.5.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/term@v0.5.2"}]}, {"name": "github.com/modern-go/concurrent", "SPDXID": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-e57e4670efd62048", "versionInfo": "v0.0.0-20180306012644-bacd9c7ef1dd", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern-go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern_go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd"}]}, {"name": "github.com/modern-go/reflect2", "SPDXID": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-c831ec94f75811d3", "versionInfo": "v1.0.3-0.20250322232337-35a7c28c31ee", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern-go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern_go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee"}]}, {"name": "github.com/opencontainers/cgroups", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-cgroups-ec5ecc501ede6e55", "versionInfo": "v0.0.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:cgroups:v0.0.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/cgroups@v0.0.8"}]}, {"name": "github.com/opencontainers/go-digest", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-7e91e372745aed58", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:go-digest:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:go_digest:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0"}]}, {"name": "github.com/opencontainers/image-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-018c25d0ade7e2c3", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:image-spec:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:image_spec:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1"}]}, {"name": "github.com/opencontainers/runc", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-runc-cbba0bf37528e6c2", "versionInfo": "v1.5.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runc:v1.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/runc@v1.5.1"}]}, {"name": "github.com/opencontainers/runtime-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-a56c4f15b894bac0", "versionInfo": "v1.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime-spec:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime_spec:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/runtime-spec@v1.3.0"}]}, {"name": "github.com/opencontainers/runtime-tools", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-tools-dc4457a5eefde152", "versionInfo": "v0.9.1-0.20260316125833-8a4db579f5c8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime-tools:v0.9.1-0.20260316125833-8a4db579f5c8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime_tools:v0.9.1-0.20260316125833-8a4db579f5c8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/runtime-tools@v0.9.1-0.20260316125833-8a4db579f5c8"}]}, {"name": "github.com/opencontainers/selinux", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-selinux-48507f97bdaa1c57", "versionInfo": "v1.15.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:selinux:v1.15.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/selinux@v1.15.1"}]}, {"name": "github.com/openshift/imagebuilder", "SPDXID": "SPDXRef-Package-go-module-github.com-openshift-imagebuilder-a6c745ca54da8046", "versionInfo": "v1.2.21", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:openshift:imagebuilder:v1.2.21:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/openshift/imagebuilder@v1.2.21"}]}, {"name": "github.com/pkg/errors", "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-errors-9a1788200a951e1e", "versionInfo": "v0.9.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pkg/errors@v0.9.1"}]}, {"name": "github.com/pkg/sftp", "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-sftp-a235888e464efa60", "versionInfo": "v1.13.11", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pkg:sftp:v1.13.11:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pkg/sftp@v1.13.11"}]}, {"name": "github.com/planetscale/vtprotobuf", "SPDXID": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-4a24748621c4e873", "versionInfo": "v0.6.1-0.20240319094008-0393e58bdf10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:planetscale:vtprotobuf:v0.6.1-0.20240319094008-0393e58bdf10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10"}]}, {"name": "github.com/pmezard/go-difflib", "SPDXID": "SPDXRef-Package-go-module-github.com-pmezard-go-difflib-387720a75b8598d1", "versionInfo": "v1.0.1-0.20181226105442-5d4384ee4fb2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pmezard:go-difflib:v1.0.1-0.20181226105442-5d4384ee4fb2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pmezard:go_difflib:v1.0.1-0.20181226105442-5d4384ee4fb2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pmezard/go-difflib@v1.0.1-0.20181226105442-5d4384ee4fb2"}]}, {"name": "github.com/proglottis/gpgme", "SPDXID": "SPDXRef-Package-go-module-github.com-proglottis-gpgme-1b49a4f27b657544", "versionInfo": "v0.1.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gpgme_project:gpgme:v0.1.6:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/proglottis/gpgme@v0.1.6"}]}, {"name": "github.com/seccomp/libseccomp-golang", "SPDXID": "SPDXRef-Package-go-module-github.com-seccomp-libseccomp-golang-2016e4e0d7586413", "versionInfo": "v0.11.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:seccomp:libseccomp-golang:v0.11.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:seccomp:libseccomp_golang:v0.11.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/seccomp/libseccomp-golang@v0.11.1"}]}, {"name": "github.com/secure-systems-lab/go-securesystemslib", "SPDXID": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-d6b0fdf738acfb72", "versionInfo": "v0.11.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure-systems-lab:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure-systems-lab:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure_systems_lab:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure_systems_lab:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure-systems:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure-systems:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure_systems:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure_systems:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.11.0"}]}, {"name": "github.com/sigstore/fulcio", "SPDXID": "SPDXRef-Package-go-module-github.com-sigstore-fulcio-055469e0a812dc47", "versionInfo": "v1.8.7", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sigstore:fulcio:v1.8.7:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sigstore/fulcio@v1.8.7"}]}, {"name": "github.com/sigstore/protobuf-specs", "SPDXID": "SPDXRef-Package-go-module-github.com-sigstore-protobuf-specs-380957910dde1b24", "versionInfo": "v0.5.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sigstore:protobuf-specs:v0.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sigstore:protobuf_specs:v0.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sigstore/protobuf-specs@v0.5.1"}]}, {"name": "github.com/sigstore/sigstore", "SPDXID": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-3cf9b8a5cb414ee7", "versionInfo": "v1.10.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sigstore:sigstore:v1.10.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sigstore/sigstore@v1.10.8"}]}, {"name": "github.com/sirupsen/logrus", "SPDXID": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-01d68c0aa81719f1", "versionInfo": "v1.9.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sirupsen:logrus:v1.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sirupsen/logrus@v1.9.4"}]}, {"name": "github.com/smallstep/pkcs7", "SPDXID": "SPDXRef-Package-go-module-github.com-smallstep-pkcs7-e1feedc200050271", "versionInfo": "v0.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:smallstep:pkcs7:v0.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/smallstep/pkcs7@v0.2.1"}]}, {"name": "github.com/spf13/cobra", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-cobra-eef9fcfc6bd61b8a", "versionInfo": "v1.10.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:cobra:v1.10.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/cobra@v1.10.2"}]}, {"name": "github.com/spf13/pflag", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-pflag-3ca165c40a362bf0", "versionInfo": "v1.0.10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:pflag:v1.0.10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/pflag@v1.0.10"}]}, {"name": "github.com/stefanberger/go-pkcs11uri", "SPDXID": "SPDXRef-Package-go-module-github.com-stefanberger-go-pkcs11uri-aba4c2304f554dbb", "versionInfo": "v0.0.0-20230803200340-78284954bff6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:stefanberger:go-pkcs11uri:v0.0.0-20230803200340-78284954bff6:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:stefanberger:go_pkcs11uri:v0.0.0-20230803200340-78284954bff6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/stefanberger/go-pkcs11uri@v0.0.0-20230803200340-78284954bff6"}]}, {"name": "github.com/sylabs/sif/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-b6727d40732fcfdb", "versionInfo": "v2.24.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sylabs:sif\\/v2:v2.24.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sylabs/sif@v2.24.1#v2"}]}, {"name": "github.com/tchap/go-patricia/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-tchap-go-patricia-v2-b5cd62a95c06a53a", "versionInfo": "v2.3.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tchap:go-patricia\\/v2:v2.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tchap:go_patricia\\/v2:v2.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/tchap/go-patricia@v2.3.3#v2"}]}, {"name": "github.com/tonistiigi/dchapes-mode", "SPDXID": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-d8327e3c1ea4b3aa", "versionInfo": "v0.0.0-20250318174251-73d941a28323", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tonistiigi:dchapes-mode:v0.0.0-20250318174251-73d941a28323:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tonistiigi:dchapes_mode:v0.0.0-20250318174251-73d941a28323:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/tonistiigi/dchapes-mode@v0.0.0-20250318174251-73d941a28323"}]}, {"name": "github.com/ulikunitz/xz", "SPDXID": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-eb963611a7a72b34", "versionInfo": "v0.5.16", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ulikunitz:xz:v0.5.16:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/ulikunitz/xz@v0.5.16"}]}, {"name": "github.com/vbatts/tar-split", "SPDXID": "SPDXRef-Package-go-module-github.com-vbatts-tar-split-7f14f580c48489cb", "versionInfo": "v0.12.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbatts:tar-split:v0.12.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbatts:tar_split:v0.12.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vbatts/tar-split@v0.12.3"}]}, {"name": "github.com/vbauerster/cupwriter", "SPDXID": "SPDXRef-Package-go-module-github.com-vbauerster-cupwriter-1989f476230e1144", "versionInfo": "v0.0.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbauerster:cupwriter:v0.0.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vbauerster/cupwriter@v0.0.4"}]}, {"name": "github.com/vbauerster/mpb/v8", "SPDXID": "SPDXRef-Package-go-module-github.com-vbauerster-mpb-v8-1dfe16a4313124e5", "versionInfo": "v8.14.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbauerster:mpb\\/v8:v8.14.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vbauerster/mpb@v8.14.0#v8"}]}, {"name": "github.com/vishvananda/netlink", "SPDXID": "SPDXRef-Package-go-module-github.com-vishvananda-netlink-ae2f00a5e23588cb", "versionInfo": "v1.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vishvananda:netlink:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vishvananda/netlink@v1.3.1"}]}, {"name": "github.com/vishvananda/netns", "SPDXID": "SPDXRef-Package-go-module-github.com-vishvananda-netns-38e469665e6c90ed", "versionInfo": "v0.0.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vishvananda:netns:v0.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vishvananda/netns@v0.0.5"}]}, {"name": "github.com/youmark/pkcs8", "SPDXID": "SPDXRef-Package-go-module-github.com-youmark-pkcs8-f938c1f9a8cf24cd", "versionInfo": "v0.0.0-20240726163527-a2c0da244d78", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:youmark:pkcs8:v0.0.0-20240726163527-a2c0da244d78:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/youmark/pkcs8@v0.0.0-20240726163527-a2c0da244d78"}]}, {"name": "go.etcd.io/bbolt", "SPDXID": "SPDXRef-Package-go-module-go.etcd.io-bbolt-e99c005027529491", "versionInfo": "v1.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.etcd.io/bbolt@v1.5.0"}]}, {"name": "go.opentelemetry.io/auto/sdk", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-cd344c9f36efaa74", "versionInfo": "v1.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:auto:sdk:v1.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1"}]}, {"name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-85b5eb3c1e96c95a", "versionInfo": "v0.69.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/otelhttp:v0.69.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation@v0.69.0#net/http/otelhttp"}]}, {"name": "go.opentelemetry.io/otel", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-712326ff377490d4", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel@v1.44.0"}]}, {"name": "go.opentelemetry.io/otel/metric", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-43d35aa1eaa7761e", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:metric:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/metric@v1.44.0"}]}, {"name": "go.opentelemetry.io/otel/trace", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-18a675eeb9f4e629", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:trace:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/trace@v1.44.0"}]}, {"name": "go.podman.io/buildah", "SPDXID": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "versionInfo": "v0.0.0-20261012000000-ff0ad7e9b3f6+dirty", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.podman.io/buildah@v0.0.0-20261012000000-ff0ad7e9b3f6%2Bdirty"}]}, {"name": "go.podman.io/common", "SPDXID": "SPDXRef-Package-go-module-go.podman.io-common-b73d64e1e1f026ad", "versionInfo": "v0.69.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.podman.io/common@v0.69.2"}]}, {"name": "go.podman.io/image/v5", "SPDXID": "SPDXRef-Package-go-module-go.podman.io-image-v5-267b15fe286d196b", "versionInfo": "v5.41.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:image:v5:v5.41.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.podman.io/image/v5@v5.41.2"}]}, {"name": "go.podman.io/storage", "SPDXID": "SPDXRef-Package-go-module-go.podman.io-storage-0a99f258bf2a5922", "versionInfo": "v1.64.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.podman.io/storage@v1.64.1"}]}, {"name": "go.yaml.in/yaml/v2", "SPDXID": "SPDXRef-Package-go-module-go.yaml.in-yaml-v2-15f6e682125c405a", "versionInfo": "v2.4.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml:v2:v2.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.yaml.in/yaml/v2@v2.4.4"}]}, {"name": "go.yaml.in/yaml/v3", "SPDXID": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-08e3631689ba2666", "versionInfo": "v3.0.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml:v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.yaml.in/yaml/v3@v3.0.5"}]}, {"name": "golang.org/x/crypto", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-crypto-5bf6c8bb05ac89b7", "versionInfo": "v0.56.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:ssh:v0.56.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/crypto@v0.56.0"}]}, {"name": "golang.org/x/mod", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-mod-c049e0e8da24e549", "versionInfo": "v0.38.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/mod:v0.38.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/mod@v0.38.0"}]}, {"name": "golang.org/x/net", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-net-ce982cc286d48283", "versionInfo": "v0.57.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:networking:v0.57.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/net@v0.57.0"}]}, {"name": "golang.org/x/sync", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sync-87530f6059cddcf0", "versionInfo": "v0.22.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sync:v0.22.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sync@v0.22.0"}]}, {"name": "golang.org/x/sys", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sys-5bf29773c312e0ad", "versionInfo": "v0.47.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sys:v0.47.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sys@v0.47.0"}]}, {"name": "golang.org/x/term", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-term-a852b1b5097c9583", "versionInfo": "v0.45.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/term:v0.45.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/term@v0.45.0"}]}, {"name": "golang.org/x/text", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-text-0b33f09b0f5b838a", "versionInfo": "v0.41.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:text:v0.41.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/text@v0.41.0"}]}, {"name": "google.golang.org/genproto/googleapis/api", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-f84998d4af573262", "versionInfo": "v0.0.0-20260526163538-3dc84a4a5aaa", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260526163538-3dc84a4a5aaa:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260526163538-3dc84a4a5aaa#api"}]}, {"name": "google.golang.org/genproto/googleapis/rpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-53a054d1ec59624e", "versionInfo": "v0.0.0-20260526163538-3dc84a4a5aaa", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260526163538-3dc84a4a5aaa:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260526163538-3dc84a4a5aaa#rpc"}]}, {"name": "google.golang.org/grpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-grpc-b9defaad287b6e42", "versionInfo": "v1.82.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:grpc:v1.82.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/grpc@v1.82.1"}]}, {"name": "google.golang.org/protobuf", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-protobuf-a21881fc809e6f28", "versionInfo": "v1.36.11", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:protobuf:v1.36.11:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/protobuf@v1.36.11"}]}, {"name": "gopkg.in/yaml.v3", "SPDXID": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-95e4a149ea37b0f8", "versionInfo": "v3.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml_project:yaml:v3.0.1:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/gopkg.in/yaml.v3@v3.0.1"}]}, {"name": "sigs.k8s.io/yaml", "SPDXID": "SPDXRef-Package-go-module-sigs.k8s.io-yaml-e77a905e15771fbf", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/sigs.k8s.io/yaml@v1.6.0"}]}, {"name": "stdlib", "SPDXID": "SPDXRef-Package-go-module-stdlib-a98a10207e4c5334", "versionInfo": "go1.27.2-X:nodwarf5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:go:1.27.2:-:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/stdlib@1.27.2-X%3Anodwarf5"}]}, {"name": "tags.cncf.io/container-device-interface", "SPDXID": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-8d9f3a471e783be0", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/tags.cncf.io/container-device-interface@v1.1.0"}]}, {"name": "tags.cncf.io/container-device-interface/specs-go", "SPDXID": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-specs-go-c5150a5acd89f695", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container-device-interface:specs-go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container-device-interface:specs_go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container_device_interface:specs-go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container_device_interface:specs_go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container-device:specs-go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container-device:specs_go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container_device:specs-go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container_device:specs_go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container:specs-go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container:specs_go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/tags.cncf.io/container-device-interface/specs-go@v1.1.0"}]}, {"name": "rpm-extracted/buildah-1.45.1-1.1.hum1.s390x", "SPDXID": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "buildah", "SPDXID": "SPDXRef-Package-rpm-buildah-39d5109f7ce261ed", "versionInfo": "1.45.1-1.1.hum1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from RPM DB: /usr/lib/debug/usr/bin/buildah-1.45.1-1.1.hum1.s390x.debug", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:buildah:buildah:1.45.1-1.1.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/hummingbird/buildah@1.45.1-1.1.hum1?distro=hummingbird-1"}]}, {"name": "rpm-extracted/buildah-debuginfo-1.45.1-1.1.hum1.s390x", "SPDXID": "SPDXRef-Directory-Root-buildah-debuginfo-1.45.1-1.1.hum1.s390x", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "rpm-extracted/buildah-debugsource-1.45.1-1.1.hum1.s390x", "SPDXID": "SPDXRef-Directory-Root-buildah-debugsource-1.45.1-1.1.hum1.s390x", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "buildah", "SPDXID": "SPDXRef-Package-rpm-buildah-261a09bf05bdb40c", "versionInfo": "1.45.1-1.1.hum1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from RPM DB: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:buildah:buildah:1.45.1-1.1.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/hummingbird/buildah@1.45.1-1.1.hum1?distro=hummingbird-1"}]}, {"name": "dario.cat/mergo", "SPDXID": "SPDXRef-Package-go-module-dario.cat-mergo-6fbc303f1b544d9d", "versionInfo": "v1.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/dario.cat/mergo@v1.0.2"}]}, {"name": "github.com/BurntSushi/toml", "SPDXID": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-119553fe385fb1d7", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:BurntSushi:toml:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/BurntSushi/toml@v1.6.0"}]}, {"name": "github.com/ProtonMail/go-crypto", "SPDXID": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-5b12152ce1dd35bd", "versionInfo": "v1.4.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ProtonMail:go-crypto:v1.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ProtonMail:go_crypto:v1.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/ProtonMail/go-crypto@v1.4.1"}]}, {"name": "github.com/VividCortex/ewma", "SPDXID": "SPDXRef-Package-go-module-github.com-VividCortex-ewma-9a07e953c3a0ea87", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:VividCortex:ewma:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/VividCortex/ewma@v1.2.0"}]}, {"name": "github.com/acarl005/stripansi", "SPDXID": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-6351fc8fb2e647d9", "versionInfo": "v0.0.0-20180116102854-5a71ef0e047d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:acarl005:stripansi:v0.0.0-20180116102854-5a71ef0e047d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/acarl005/stripansi@v0.0.0-20180116102854-5a71ef0e047d"}]}, {"name": "github.com/aead/serpent", "SPDXID": "SPDXRef-Package-go-module-github.com-aead-serpent-fe7bb2575011fa0b", "versionInfo": "v0.0.0-20160714141033-fba169763ea6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aead:serpent:v0.0.0-20160714141033-fba169763ea6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aead/serpent@v0.0.0-20160714141033-fba169763ea6"}]}, {"name": "github.com/cespare/xxhash/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-3f753f271166cf43", "versionInfo": "v2.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cespare/xxhash@v2.3.0#v2"}]}, {"name": "github.com/chzyer/readline", "SPDXID": "SPDXRef-Package-go-module-github.com-chzyer-readline-934aa75f248e0869", "versionInfo": "v1.5.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:chzyer:readline:v1.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/chzyer/readline@v1.5.1"}]}, {"name": "github.com/clipperhouse/uax29/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-0f71d421e6bba326", "versionInfo": "v2.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:clipperhouse:uax29\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/clipperhouse/uax29@v2.7.0#v2"}]}, {"name": "github.com/cloudflare/circl", "SPDXID": "SPDXRef-Package-go-module-github.com-cloudflare-circl-b70d31027f28f5bd", "versionInfo": "v1.6.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cloudflare:circl:v1.6.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cloudflare/circl@v1.6.3"}]}, {"name": "github.com/containerd/errdefs", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-errdefs-a77bd8987c5f84a5", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:errdefs:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/errdefs@v1.0.0"}]}, {"name": "github.com/containerd/errdefs/pkg", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-06dd29112cd4624a", "versionInfo": "v0.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:errdefs\\/pkg:v0.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/errdefs@v0.3.0#pkg"}]}, {"name": "github.com/containerd/log", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-log-1cbf87db618d69ff", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:log:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/log@v0.1.0"}]}, {"name": "github.com/containerd/platforms", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-platforms-31d2894929a71346", "versionInfo": "v1.0.0-rc.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:platforms:v1.0.0-rc.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/platforms@v1.0.0-rc.4"}]}, {"name": "github.com/containerd/stargz-snapshotter/estargz", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-stargz-snapshotter-estargz-51376b5b87eff751", "versionInfo": "v0.18.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:stargz-snapshotter\\/estargz:v0.18.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:stargz_snapshotter\\/estargz:v0.18.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/stargz-snapshotter@v0.18.2#estargz"}]}, {"name": "github.com/containerd/typeurl/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-38a588fac2174035", "versionInfo": "v2.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:typeurl\\/v2:v2.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/typeurl@v2.3.0#v2"}]}, {"name": "github.com/containers/libtrust", "SPDXID": "SPDXRef-Package-go-module-github.com-containers-libtrust-7cdbbcb708e500d0", "versionInfo": "v0.0.0-20230121012942-c1716e8a8d01", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containers:libtrust:v0.0.0-20230121012942-c1716e8a8d01:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containers/libtrust@v0.0.0-20230121012942-c1716e8a8d01"}]}, {"name": "github.com/containers/luksy", "SPDXID": "SPDXRef-Package-go-module-github.com-containers-luksy-44c015a2bf099020", "versionInfo": "v0.0.0-20251208191447-ca096313c38f", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containers:luksy:v0.0.0-20251208191447-ca096313c38f:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containers/luksy@v0.0.0-20251208191447-ca096313c38f"}]}, {"name": "github.com/containers/ocicrypt", "SPDXID": "SPDXRef-Package-go-module-github.com-containers-ocicrypt-dba9125aad323008", "versionInfo": "v1.3.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containers:ocicrypt:v1.3.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containers/ocicrypt@v1.3.2"}]}, {"name": "github.com/coreos/go-systemd/v22", "SPDXID": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-v22-b79826eea044c3de", "versionInfo": "v22.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go-systemd\\/v22:v22.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go_systemd\\/v22:v22.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/coreos/go-systemd@v22.7.0#v22"}]}, {"name": "github.com/cyberphone/json-canonicalization", "SPDXID": "SPDXRef-Package-go-module-github.com-cyberphone-json-canonicalization-fd21c516597b5b70", "versionInfo": "v0.0.0-20241213102144-19d51d7fe467", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyberphone:json-canonicalization:v0.0.0-20241213102144-19d51d7fe467:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyberphone:json_canonicalization:v0.0.0-20241213102144-19d51d7fe467:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cyberphone/json-canonicalization@v0.0.0-20241213102144-19d51d7fe467"}]}, {"name": "github.com/cyphar/filepath-securejoin", "SPDXID": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-b3fcb50611c1a1b0", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyphar:filepath-securejoin:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyphar:filepath_securejoin:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cyphar/filepath-securejoin@v0.7.0"}]}, {"name": "github.com/davecgh/go-spew", "SPDXID": "SPDXRef-Package-go-module-github.com-davecgh-go-spew-b6ef6271628c93d9", "versionInfo": "v1.1.2-0.20180830191138-d8f796af33cc", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:davecgh:go-spew:v1.1.2-0.20180830191138-d8f796af33cc:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:davecgh:go_spew:v1.1.2-0.20180830191138-d8f796af33cc:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc"}]}, {"name": "github.com/disiqueira/gotree/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-disiqueira-gotree-v3-5811d37610b3bac4", "versionInfo": "v3.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:disiqueira:gotree\\/v3:v3.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/disiqueira/gotree@v3.0.2#v3"}]}, {"name": "github.com/distribution/reference", "SPDXID": "SPDXRef-Package-go-module-github.com-distribution-reference-4eb6661d5ad12786", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:distribution:reference:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/distribution/reference@v0.6.0"}]}, {"name": "github.com/docker/distribution", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-distribution-717995af41ce103a", "versionInfo": "v2.8.3+incompatible", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:distribution:v2.8.3\\+incompatible:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/distribution@v2.8.3%2Bincompatible"}]}, {"name": "github.com/docker/docker-credential-helpers", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-ad74de95dbfeaeab", "versionInfo": "v0.9.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:docker-credential-helpers:v0.9.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:docker_credential_helpers:v0.9.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.8"}]}, {"name": "github.com/docker/go-connections", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-go-connections-0359b2c77104e8a1", "versionInfo": "v0.8.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go-connections:v0.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go_connections:v0.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/go-connections@v0.8.1"}]}, {"name": "github.com/docker/go-units", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-go-units-77948dbadfac58b3", "versionInfo": "v0.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go-units:v0.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go_units:v0.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/go-units@v0.5.0"}]}, {"name": "github.com/felixge/httpsnoop", "SPDXID": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-eccc590e81a9439d", "versionInfo": "v1.0.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:felixge:httpsnoop:v1.0.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/felixge/httpsnoop@v1.0.4"}]}, {"name": "github.com/fsnotify/fsnotify", "SPDXID": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-e2cb2c4850f48e72", "versionInfo": "v1.10.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fsnotify:fsnotify:v1.10.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fsnotify/fsnotify@v1.10.1"}]}, {"name": "github.com/fsouza/go-dockerclient", "SPDXID": "SPDXRef-Package-go-module-github.com-fsouza-go-dockerclient-0e2b9edcedb280a5", "versionInfo": "v1.13.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fsouza:go-dockerclient:v1.13.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fsouza:go_dockerclient:v1.13.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fsouza/go-dockerclient@v1.13.2"}]}, {"name": "github.com/go-jose/go-jose/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-85ed2b122b07fea8", "versionInfo": "v4.1.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-jose/go-jose@v4.1.4#v4"}]}, {"name": "github.com/go-logr/logr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-logr-508a4babd6e890ae", "versionInfo": "v1.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:logr:v1.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:logr:v1.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:logr:v1.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/logr@v1.4.3"}]}, {"name": "github.com/go-logr/stdr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-stdr-6328c8f49fb08380", "versionInfo": "v1.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/stdr@v1.2.2"}]}, {"name": "github.com/godbus/dbus/v5", "SPDXID": "SPDXRef-Package-go-module-github.com-godbus-dbus-v5-9488363765660ed9", "versionInfo": "v5.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:godbus:dbus\\/v5:v5.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/godbus/dbus@v5.2.2#v5"}]}, {"name": "github.com/google/go-containerregistry", "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-4f74dccddc4ae2f1", "versionInfo": "v0.21.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go-containerregistry:v0.21.6:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go_containerregistry:v0.21.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/go-containerregistry@v0.21.6"}]}, {"name": "github.com/google/go-intervals", "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-intervals-96c2f7b75d366775", "versionInfo": "v0.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go-intervals:v0.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go_intervals:v0.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/go-intervals@v0.0.2"}]}, {"name": "github.com/google/uuid", "SPDXID": "SPDXRef-Package-go-module-github.com-google-uuid-a7bae91b3797e03b", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/uuid@v1.6.0"}]}, {"name": "github.com/gorilla/mux", "SPDXID": "SPDXRef-Package-go-module-github.com-gorilla-mux-9d6ac413ee3f1c2b", "versionInfo": "v1.8.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gorilla:mux:v1.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gorilla/mux@v1.8.1"}]}, {"name": "github.com/hashicorp/errwrap", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-4bd4ed9fbdf075be", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:errwrap:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0"}]}, {"name": "github.com/hashicorp/go-multierror", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-eae9dba9937b7227", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-multierror:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_multierror:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1"}]}, {"name": "github.com/jinzhu/copier", "SPDXID": "SPDXRef-Package-go-module-github.com-jinzhu-copier-2518d24a94eba6c5", "versionInfo": "v0.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jinzhu:copier:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jinzhu/copier@v0.4.0"}]}, {"name": "github.com/json-iterator/go", "SPDXID": "SPDXRef-Package-go-module-github.com-json-iterator-go-6404cb6554d1e194", "versionInfo": "v1.1.12", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json-iterator:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json_iterator:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/json-iterator/go@v1.1.12"}]}, {"name": "github.com/klauspost/compress", "SPDXID": "SPDXRef-Package-go-module-github.com-klauspost-compress-cbaeb8989eb727f1", "versionInfo": "v1.19.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:klauspost:compress:v1.19.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/klauspost/compress@v1.19.1"}]}, {"name": "github.com/klauspost/pgzip", "SPDXID": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-3dc3d9ab050339f3", "versionInfo": "v1.2.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:klauspost:pgzip:v1.2.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/klauspost/pgzip@v1.2.6"}]}, {"name": "github.com/kr/fs", "SPDXID": "SPDXRef-Package-go-module-github.com-kr-fs-55e2f027d27e8046", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:kr:fs:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/kr/fs@v0.1.0"}]}, {"name": "github.com/manifoldco/promptui", "SPDXID": "SPDXRef-Package-go-module-github.com-manifoldco-promptui-248ade55d631a964", "versionInfo": "v0.9.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:manifoldco:promptui:v0.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/manifoldco/promptui@v0.9.0"}]}, {"name": "github.com/mattn/go-runewidth", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-8259cc38a5cbd831", "versionInfo": "v0.0.27", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-runewidth:v0.0.27:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_runewidth:v0.0.27:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-runewidth@v0.0.27"}]}, {"name": "github.com/mattn/go-shellwords", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-9ef6c56dac778aae", "versionInfo": "v1.0.14", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-shellwords:v1.0.14:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_shellwords:v1.0.14:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-shellwords@v1.0.14"}]}, {"name": "github.com/mattn/go-sqlite3", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-sqlite3-8768f5bf845d9516", "versionInfo": "v1.14.48", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-sqlite3:v1.14.48:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_sqlite3:v1.14.48:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-sqlite3@v1.14.48"}]}, {"name": "github.com/miekg/pkcs11", "SPDXID": "SPDXRef-Package-go-module-github.com-miekg-pkcs11-972259110bd726b4", "versionInfo": "v1.1.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:miekg:pkcs11:v1.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/miekg/pkcs11@v1.1.2"}]}, {"name": "github.com/mistifyio/go-zfs/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-mistifyio-go-zfs-v4-15f757a30642dd8f", "versionInfo": "v4.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mistifyio:go-zfs\\/v4:v4.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mistifyio:go_zfs\\/v4:v4.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mistifyio/go-zfs@v4.0.0#v4"}]}, {"name": "github.com/moby/buildkit", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-buildkit-4031161622401abb", "versionInfo": "v0.31.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:buildkit:v0.31.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/buildkit@v0.31.2"}]}, {"name": "github.com/moby/docker-image-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-7e4767630bac35c1", "versionInfo": "v1.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:docker-image-spec:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:docker_image_spec:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/docker-image-spec@v1.3.1"}]}, {"name": "github.com/moby/go-archive", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-go-archive-ab308eee621e5002", "versionInfo": "v0.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:go-archive:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:go_archive:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/go-archive@v0.2.0"}]}, {"name": "github.com/moby/moby/api", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-moby-api-6cb09d29b304e422", "versionInfo": "v1.55.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:moby\\/api:v1.55.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/moby@v1.55.0#api"}]}, {"name": "github.com/moby/moby/client", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-moby-client-80691b3ba68f6e04", "versionInfo": "v0.5.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:moby\\/client:v0.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/moby@v0.5.1#client"}]}, {"name": "github.com/moby/patternmatcher", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-d34410eb11c4820b", "versionInfo": "v0.6.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:patternmatcher:v0.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/patternmatcher@v0.6.1"}]}, {"name": "github.com/moby/sys/capability", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-capability-238db1746bb8e977", "versionInfo": "v0.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/capability:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.4.0#capability"}]}, {"name": "github.com/moby/sys/devices", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-devices-1e07e3c4c9b3a9a2", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/devices:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.1.0#devices"}]}, {"name": "github.com/moby/sys/mountinfo", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-8cb96421b7d441e0", "versionInfo": "v0.7.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/mountinfo:v0.7.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.7.2#mountinfo"}]}, {"name": "github.com/moby/sys/sequential", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-6bf44d498b26678d", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/sequential:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.7.0#sequential"}]}, {"name": "github.com/moby/sys/user", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-user-56f2812e558d7884", "versionInfo": "v0.4.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/user:v0.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.4.1#user"}]}, {"name": "github.com/moby/sys/userns", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-userns-839bd1ed1746f977", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/userns:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.1.0#userns"}]}, {"name": "github.com/moby/term", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-term-a9b451e6148e9e9d", "versionInfo": "v0.5.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:term:v0.5.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/term@v0.5.2"}]}, {"name": "github.com/modern-go/concurrent", "SPDXID": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-61e557373116f66a", "versionInfo": "v0.0.0-20180306012644-bacd9c7ef1dd", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern-go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern_go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd"}]}, {"name": "github.com/modern-go/reflect2", "SPDXID": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-f42cb4f983076081", "versionInfo": "v1.0.3-0.20250322232337-35a7c28c31ee", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern-go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern_go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee"}]}, {"name": "github.com/opencontainers/cgroups", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-cgroups-553273446a892597", "versionInfo": "v0.0.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:cgroups:v0.0.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/cgroups@v0.0.8"}]}, {"name": "github.com/opencontainers/go-digest", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-c4511dc772f2c7ae", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:go-digest:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:go_digest:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0"}]}, {"name": "github.com/opencontainers/image-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-937d7e46091b51fd", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:image-spec:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:image_spec:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1"}]}, {"name": "github.com/opencontainers/runc", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-runc-eed7e275197232fc", "versionInfo": "v1.5.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runc:v1.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/runc@v1.5.1"}]}, {"name": "github.com/opencontainers/runtime-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-067ff806a0e5098a", "versionInfo": "v1.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime-spec:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime_spec:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/runtime-spec@v1.3.0"}]}, {"name": "github.com/opencontainers/runtime-tools", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-tools-adeb50779fe31f18", "versionInfo": "v0.9.1-0.20260316125833-8a4db579f5c8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime-tools:v0.9.1-0.20260316125833-8a4db579f5c8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime_tools:v0.9.1-0.20260316125833-8a4db579f5c8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/runtime-tools@v0.9.1-0.20260316125833-8a4db579f5c8"}]}, {"name": "github.com/opencontainers/selinux", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-selinux-b59e915c266274b5", "versionInfo": "v1.15.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:selinux:v1.15.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/selinux@v1.15.1"}]}, {"name": "github.com/openshift/imagebuilder", "SPDXID": "SPDXRef-Package-go-module-github.com-openshift-imagebuilder-eb55a89a085ded30", "versionInfo": "v1.2.21", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:openshift:imagebuilder:v1.2.21:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/openshift/imagebuilder@v1.2.21"}]}, {"name": "github.com/pkg/errors", "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-errors-24cfbc491cc7e0fc", "versionInfo": "v0.9.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pkg/errors@v0.9.1"}]}, {"name": "github.com/pkg/sftp", "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-sftp-29e57ea1c99898b2", "versionInfo": "v1.13.11", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pkg:sftp:v1.13.11:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pkg/sftp@v1.13.11"}]}, {"name": "github.com/planetscale/vtprotobuf", "SPDXID": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-c518e06a3692561d", "versionInfo": "v0.6.1-0.20240319094008-0393e58bdf10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:planetscale:vtprotobuf:v0.6.1-0.20240319094008-0393e58bdf10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10"}]}, {"name": "github.com/pmezard/go-difflib", "SPDXID": "SPDXRef-Package-go-module-github.com-pmezard-go-difflib-5f5dc6c09d1e2633", "versionInfo": "v1.0.1-0.20181226105442-5d4384ee4fb2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pmezard:go-difflib:v1.0.1-0.20181226105442-5d4384ee4fb2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pmezard:go_difflib:v1.0.1-0.20181226105442-5d4384ee4fb2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pmezard/go-difflib@v1.0.1-0.20181226105442-5d4384ee4fb2"}]}, {"name": "github.com/proglottis/gpgme", "SPDXID": "SPDXRef-Package-go-module-github.com-proglottis-gpgme-27453a243a43f5b2", "versionInfo": "v0.1.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gpgme_project:gpgme:v0.1.6:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/proglottis/gpgme@v0.1.6"}]}, {"name": "github.com/seccomp/libseccomp-golang", "SPDXID": "SPDXRef-Package-go-module-github.com-seccomp-libseccomp-golang-fe3ba33df5617f8d", "versionInfo": "v0.11.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:seccomp:libseccomp-golang:v0.11.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:seccomp:libseccomp_golang:v0.11.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/seccomp/libseccomp-golang@v0.11.1"}]}, {"name": "github.com/secure-systems-lab/go-securesystemslib", "SPDXID": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-e6d1493614193f44", "versionInfo": "v0.11.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure-systems-lab:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure-systems-lab:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure_systems_lab:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure_systems_lab:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure-systems:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure-systems:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure_systems:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure_systems:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.11.0"}]}, {"name": "github.com/sigstore/fulcio", "SPDXID": "SPDXRef-Package-go-module-github.com-sigstore-fulcio-a8a5c9731df7cec5", "versionInfo": "v1.8.7", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sigstore:fulcio:v1.8.7:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sigstore/fulcio@v1.8.7"}]}, {"name": "github.com/sigstore/protobuf-specs", "SPDXID": "SPDXRef-Package-go-module-github.com-sigstore-protobuf-specs-2e1dccb05431fbfa", "versionInfo": "v0.5.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sigstore:protobuf-specs:v0.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sigstore:protobuf_specs:v0.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sigstore/protobuf-specs@v0.5.1"}]}, {"name": "github.com/sigstore/sigstore", "SPDXID": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-e8c1a17a3e50ac0d", "versionInfo": "v1.10.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sigstore:sigstore:v1.10.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sigstore/sigstore@v1.10.8"}]}, {"name": "github.com/sirupsen/logrus", "SPDXID": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-51907abec07cecb7", "versionInfo": "v1.9.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sirupsen:logrus:v1.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sirupsen/logrus@v1.9.4"}]}, {"name": "github.com/smallstep/pkcs7", "SPDXID": "SPDXRef-Package-go-module-github.com-smallstep-pkcs7-0e28f0c0ef318b53", "versionInfo": "v0.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:smallstep:pkcs7:v0.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/smallstep/pkcs7@v0.2.1"}]}, {"name": "github.com/spf13/cobra", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-cobra-8350de601ae9bc18", "versionInfo": "v1.10.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:cobra:v1.10.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/cobra@v1.10.2"}]}, {"name": "github.com/spf13/pflag", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-pflag-a5ef70b02849297e", "versionInfo": "v1.0.10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:pflag:v1.0.10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/pflag@v1.0.10"}]}, {"name": "github.com/stefanberger/go-pkcs11uri", "SPDXID": "SPDXRef-Package-go-module-github.com-stefanberger-go-pkcs11uri-60016603187fd13d", "versionInfo": "v0.0.0-20230803200340-78284954bff6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:stefanberger:go-pkcs11uri:v0.0.0-20230803200340-78284954bff6:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:stefanberger:go_pkcs11uri:v0.0.0-20230803200340-78284954bff6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/stefanberger/go-pkcs11uri@v0.0.0-20230803200340-78284954bff6"}]}, {"name": "github.com/sylabs/sif/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-5866c3604c88fd1d", "versionInfo": "v2.24.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sylabs:sif\\/v2:v2.24.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sylabs/sif@v2.24.1#v2"}]}, {"name": "github.com/tchap/go-patricia/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-tchap-go-patricia-v2-95336329dd558fa4", "versionInfo": "v2.3.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tchap:go-patricia\\/v2:v2.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tchap:go_patricia\\/v2:v2.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/tchap/go-patricia@v2.3.3#v2"}]}, {"name": "github.com/tonistiigi/dchapes-mode", "SPDXID": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-f698bea4459b85e0", "versionInfo": "v0.0.0-20250318174251-73d941a28323", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tonistiigi:dchapes-mode:v0.0.0-20250318174251-73d941a28323:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tonistiigi:dchapes_mode:v0.0.0-20250318174251-73d941a28323:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/tonistiigi/dchapes-mode@v0.0.0-20250318174251-73d941a28323"}]}, {"name": "github.com/ulikunitz/xz", "SPDXID": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-813d9909f7aa5876", "versionInfo": "v0.5.16", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ulikunitz:xz:v0.5.16:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/ulikunitz/xz@v0.5.16"}]}, {"name": "github.com/vbatts/tar-split", "SPDXID": "SPDXRef-Package-go-module-github.com-vbatts-tar-split-2ddbd944c45e4309", "versionInfo": "v0.12.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbatts:tar-split:v0.12.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbatts:tar_split:v0.12.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vbatts/tar-split@v0.12.3"}]}, {"name": "github.com/vbauerster/cupwriter", "SPDXID": "SPDXRef-Package-go-module-github.com-vbauerster-cupwriter-2fb635995646eff2", "versionInfo": "v0.0.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbauerster:cupwriter:v0.0.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vbauerster/cupwriter@v0.0.4"}]}, {"name": "github.com/vbauerster/mpb/v8", "SPDXID": "SPDXRef-Package-go-module-github.com-vbauerster-mpb-v8-51a6248664097e67", "versionInfo": "v8.14.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbauerster:mpb\\/v8:v8.14.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vbauerster/mpb@v8.14.0#v8"}]}, {"name": "github.com/vishvananda/netlink", "SPDXID": "SPDXRef-Package-go-module-github.com-vishvananda-netlink-3161a3b376608075", "versionInfo": "v1.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vishvananda:netlink:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vishvananda/netlink@v1.3.1"}]}, {"name": "github.com/vishvananda/netns", "SPDXID": "SPDXRef-Package-go-module-github.com-vishvananda-netns-a0940c2defb854ef", "versionInfo": "v0.0.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vishvananda:netns:v0.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vishvananda/netns@v0.0.5"}]}, {"name": "github.com/youmark/pkcs8", "SPDXID": "SPDXRef-Package-go-module-github.com-youmark-pkcs8-1e266857d1fd3a9b", "versionInfo": "v0.0.0-20240726163527-a2c0da244d78", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:youmark:pkcs8:v0.0.0-20240726163527-a2c0da244d78:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/youmark/pkcs8@v0.0.0-20240726163527-a2c0da244d78"}]}, {"name": "go.etcd.io/bbolt", "SPDXID": "SPDXRef-Package-go-module-go.etcd.io-bbolt-dbee62f6de8e6b9f", "versionInfo": "v1.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.etcd.io/bbolt@v1.5.0"}]}, {"name": "go.opentelemetry.io/auto/sdk", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-2937097fe5a85a06", "versionInfo": "v1.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:auto:sdk:v1.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1"}]}, {"name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-93466cb86eff145c", "versionInfo": "v0.69.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/otelhttp:v0.69.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation@v0.69.0#net/http/otelhttp"}]}, {"name": "go.opentelemetry.io/otel", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-7a043d1e327c1af6", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel@v1.44.0"}]}, {"name": "go.opentelemetry.io/otel/metric", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-47374a15fc19abe8", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:metric:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/metric@v1.44.0"}]}, {"name": "go.opentelemetry.io/otel/trace", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-eddba441de8a22ff", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:trace:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/trace@v1.44.0"}]}, {"name": "go.podman.io/buildah", "SPDXID": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "versionInfo": "v0.0.0-20261012000000-ff0ad7e9b3f6+dirty", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.podman.io/buildah@v0.0.0-20261012000000-ff0ad7e9b3f6%2Bdirty"}]}, {"name": "go.podman.io/common", "SPDXID": "SPDXRef-Package-go-module-go.podman.io-common-4e23712deaa64e2f", "versionInfo": "v0.69.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.podman.io/common@v0.69.2"}]}, {"name": "go.podman.io/image/v5", "SPDXID": "SPDXRef-Package-go-module-go.podman.io-image-v5-f58f559296826499", "versionInfo": "v5.41.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:image:v5:v5.41.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.podman.io/image/v5@v5.41.2"}]}, {"name": "go.podman.io/storage", "SPDXID": "SPDXRef-Package-go-module-go.podman.io-storage-4cb5260b083892ac", "versionInfo": "v1.64.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.podman.io/storage@v1.64.1"}]}, {"name": "go.yaml.in/yaml/v2", "SPDXID": "SPDXRef-Package-go-module-go.yaml.in-yaml-v2-374827ae56943fe4", "versionInfo": "v2.4.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml:v2:v2.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.yaml.in/yaml/v2@v2.4.4"}]}, {"name": "go.yaml.in/yaml/v3", "SPDXID": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-37fdbf9f74f14638", "versionInfo": "v3.0.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml:v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.yaml.in/yaml/v3@v3.0.5"}]}, {"name": "golang.org/x/crypto", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-crypto-c113541583efad4d", "versionInfo": "v0.56.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:ssh:v0.56.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/crypto@v0.56.0"}]}, {"name": "golang.org/x/mod", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-mod-c5cbcb5d29a8e1db", "versionInfo": "v0.38.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/mod:v0.38.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/mod@v0.38.0"}]}, {"name": "golang.org/x/net", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-net-4677d236992205a1", "versionInfo": "v0.57.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:networking:v0.57.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/net@v0.57.0"}]}, {"name": "golang.org/x/sync", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sync-66177ede863ea72a", "versionInfo": "v0.22.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sync:v0.22.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sync@v0.22.0"}]}, {"name": "golang.org/x/sys", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sys-1badf9e25c0d75d3", "versionInfo": "v0.47.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sys:v0.47.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sys@v0.47.0"}]}, {"name": "golang.org/x/term", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-term-13944c83c63f8a91", "versionInfo": "v0.45.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/term:v0.45.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/term@v0.45.0"}]}, {"name": "golang.org/x/text", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-text-06d7aa9861df8abc", "versionInfo": "v0.41.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:text:v0.41.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/text@v0.41.0"}]}, {"name": "google.golang.org/genproto/googleapis/api", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-256156fe2dd60918", "versionInfo": "v0.0.0-20260526163538-3dc84a4a5aaa", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260526163538-3dc84a4a5aaa:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260526163538-3dc84a4a5aaa#api"}]}, {"name": "google.golang.org/genproto/googleapis/rpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-2c3b05c24801e5d0", "versionInfo": "v0.0.0-20260526163538-3dc84a4a5aaa", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260526163538-3dc84a4a5aaa:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260526163538-3dc84a4a5aaa#rpc"}]}, {"name": "google.golang.org/grpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-grpc-49f4bb0d86b8560c", "versionInfo": "v1.82.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:grpc:v1.82.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/grpc@v1.82.1"}]}, {"name": "google.golang.org/protobuf", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-protobuf-75175fa77c9d9e02", "versionInfo": "v1.36.11", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:protobuf:v1.36.11:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/protobuf@v1.36.11"}]}, {"name": "gopkg.in/yaml.v3", "SPDXID": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-62ad02d9b04f652a", "versionInfo": "v3.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml_project:yaml:v3.0.1:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/gopkg.in/yaml.v3@v3.0.1"}]}, {"name": "sigs.k8s.io/yaml", "SPDXID": "SPDXRef-Package-go-module-sigs.k8s.io-yaml-22a4b1fc5e8ff8d1", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/sigs.k8s.io/yaml@v1.6.0"}]}, {"name": "stdlib", "SPDXID": "SPDXRef-Package-go-module-stdlib-a98a10207e4c5334", "versionInfo": "go1.27.2-X:nodwarf5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:go:1.27.2:-:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/stdlib@1.27.2-X%3Anodwarf5"}]}, {"name": "tags.cncf.io/container-device-interface", "SPDXID": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-96f91443a039e95e", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/tags.cncf.io/container-device-interface@v1.1.0"}]}, {"name": "tags.cncf.io/container-device-interface/specs-go", "SPDXID": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-specs-go-038d9813ffa3b347", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container-device-interface:specs-go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container-device-interface:specs_go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container_device_interface:specs-go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container_device_interface:specs_go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container-device:specs-go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container-device:specs_go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container_device:specs-go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container_device:specs_go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container:specs-go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container:specs_go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/tags.cncf.io/container-device-interface/specs-go@v1.1.0"}]}, {"name": "rpm-extracted/buildah-1.45.1-1.1.hum1.x86_64", "SPDXID": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "buildah", "SPDXID": "SPDXRef-Package-rpm-buildah-a5f22dc466ec54df", "versionInfo": "1.45.1-1.1.hum1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from RPM DB: /usr/lib/debug/usr/bin/buildah-1.45.1-1.1.hum1.x86_64.debug", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:buildah:buildah:1.45.1-1.1.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/hummingbird/buildah@1.45.1-1.1.hum1?distro=hummingbird-1"}]}, {"name": "rpm-extracted/buildah-debuginfo-1.45.1-1.1.hum1.x86_64", "SPDXID": "SPDXRef-Directory-Root-buildah-debuginfo-1.45.1-1.1.hum1.x86-64", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "rpm-extracted/buildah-debugsource-1.45.1-1.1.hum1.x86_64", "SPDXID": "SPDXRef-Directory-Root-buildah-debugsource-1.45.1-1.1.hum1.x86-64", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}], "files": [{"fileName": "usr/bin/buildah", "SPDXID": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "fileTypes": ["APPLICATION", "BINARY"], "checksums": [{"algorithm": "SHA1", "checksumValue": "0b6582b519492a3645dbc76d511ae1aa7af850f6"}, {"algorithm": "SHA256", "checksumValue": "8d2f5cfebfd01c1802054fd54dcef97285bcde9a0b25c6c9da05c93fb403152b"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "buildah-1.45.1/.github/workflows/ci.yml", "SPDXID": "SPDXRef-File-....github-workflows-ci.yml-c36761807c3b3a00", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "fb1ffe039b8d9f75643e9ac04a7eb2e7aee27751"}, {"algorithm": "SHA256", "checksumValue": "557675ab96c21d6d74b299b0524cc3ef86ef44246acc86ba97a2004e5a342c20"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "buildah-1.45.1/.github/workflows/issue_pr_lock.yml", "SPDXID": "SPDXRef-File-....github-workflows-issue-pr-lock.yml-32351997c25d719b", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "8d68a519920bab69a5c95dbda8c8c60baa931366"}, {"algorithm": "SHA256", "checksumValue": "19f3697e86fde828c178255de798c838d40e94d72fcc214868f6c094464ac969"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "buildah-1.45.1/.github/workflows/lima.yml", "SPDXID": "SPDXRef-File-....github-workflows-lima.yml-59b5cd4280d1856d", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "0deebc00aceb31b5c69950daa52c4f349ed563dc"}, {"algorithm": "SHA256", "checksumValue": "5f10aa06f1dd37494808fe3ac821765558ce1970e9c6383118e98d3cdfbc8f3c"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "buildah-1.45.1/.github/workflows/stale.yml", "SPDXID": "SPDXRef-File-....github-workflows-stale.yml-78b6c7eb36262580", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "9e20d545fdbc6b581622722c5d59e9ea5dac168d"}, {"algorithm": "SHA256", "checksumValue": "a1a701df372cb17f301bb070b4d6e4a0b4d531abc18af38ea8e7479df6e4a16a"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "buildah-1.45.1/go.mod", "SPDXID": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "d461d739b09be8e8fc12bef8ff027042e0bd3848"}, {"algorithm": "SHA256", "checksumValue": "d787b6b9e9c82757c8c90274af1c5dcb487b9069967c7903a65389b3347acf33"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "buildah-1.45.1/tests/tools/go.mod", "SPDXID": "SPDXRef-File-buildah-1.45.1-tests-tools-go.mod-d7854cf55ce9efd9", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "abc01378f84ff42fdeb5e2a7dd1d5c6796a2570d"}, {"algorithm": "SHA256", "checksumValue": "776ebc4dd4f9a39b6bebdc18222d4a15590debd8b8c71a99be4b41ea6eef0028"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "buildah-1.45.1/vendor/go.opentelemetry.io/otel/requirements.txt", "SPDXID": "SPDXRef-File-...otel-requirements.txt-499c8ee119bf2901", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "caa1c2b45eb780dafb1d51f1af54467690a3e576"}, {"algorithm": "SHA256", "checksumValue": "5870c83413e8bee660f619ac3c8b4f3bdd41a9b347e700530f3d675af3e2d483"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/lib/debug/usr/bin/buildah-1.45.1-1.1.hum1.aarch64.debug", "SPDXID": "SPDXRef-File-...buildah-1.45.1-1.1.hum1.aarch64.debug-9eb15296ea7b344a", "fileTypes": ["APPLICATION", "BINARY"], "checksums": [{"algorithm": "SHA1", "checksumValue": "f8e1ffebeb86d8510bed0736861d2941511f89f7"}, {"algorithm": "SHA256", "checksumValue": "46f8670c5619d3d9471c4a79df3417653724e9d2d75a8b8dbb5a3394801e9a74"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/bin/buildah", "SPDXID": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "fileTypes": ["APPLICATION", "BINARY"], "checksums": [{"algorithm": "SHA1", "checksumValue": "d2268760d3284bc9fade2831a06e850c991a73d8"}, {"algorithm": "SHA256", "checksumValue": "05c3fada2bed4d01f6db613add1f7cd320e1b3eba965d3933f9443b77b5e6d92"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/lib/debug/usr/bin/buildah-1.45.1-1.1.hum1.s390x.debug", "SPDXID": "SPDXRef-File-...buildah-1.45.1-1.1.hum1.s390x.debug-417f03b0f74ab4f4", "fileTypes": ["APPLICATION", "BINARY"], "checksums": [{"algorithm": "SHA1", "checksumValue": "d665038970ddfa4b2814db45af7e630d1414ebb3"}, {"algorithm": "SHA256", "checksumValue": "f87e61ac3b993fe5ba3285da3f4093b3cc244d5bf2c1bcbc6ced4f7d5c522056"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/bin/buildah", "SPDXID": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "fileTypes": ["APPLICATION", "BINARY"], "checksums": [{"algorithm": "SHA1", "checksumValue": "35def4255b5cebfdc84c15d5b2a2d38f7ef20098"}, {"algorithm": "SHA256", "checksumValue": "61a2b4bfab35e2d4bf27e04b49e94d07234cc2c52e6bd08825f40dc9cdda56ac"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/lib/debug/usr/bin/buildah-1.45.1-1.1.hum1.x86_64.debug", "SPDXID": "SPDXRef-File-...buildah-1.45.1-1.1.hum1.x86-64.debug-2bb110e59a8d4130", "fileTypes": ["APPLICATION", "BINARY"], "checksums": [{"algorithm": "SHA1", "checksumValue": "75e578e1fd67ecac772d758a6b565413fcdc11bd"}, {"algorithm": "SHA256", "checksumValue": "e93c493831cf45609b6100f63a99ad2b2f3d39c0d64e55bbfe53b26ea7936046"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}], "relationships": [{"spdxElementId": "SPDXRef-DOCUMENT", "relationshipType": "DESCRIBES", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-aarch64-buildah", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-s390x-buildah", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-x86-64-buildah", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-aarch64-buildah-debuginfo", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-s390x-buildah-debuginfo", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-x86-64-buildah-debuginfo", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-aarch64-buildah-debugsource", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-s390x-buildah-debugsource", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-x86-64-buildah-debugsource", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source0"}, {"spdxElementId": "SPDXRef-Source0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Source0-origin"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-R-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-add-determinism-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-alternatives-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-annobin-docs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-annobin-plugin-gcc-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ansible-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-audit-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-authselect-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-authselect-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bash-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-binutils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-btrfs-progs-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-btrfs-progs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-build-reproducibility-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bzip2-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bzip2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ca-certificates-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cmake-filesystem-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cmake-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-coreutils-common-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-coreutils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cpio-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cpp-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cracklib-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-crypto-policies-config-default-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-crypto-policies-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-curl-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cyrus-sasl-lib-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-debugedit-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-device-mapper-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-device-mapper-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-device-mapper-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-diffutils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-dwz-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-e2fsprogs-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ed-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-efi-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-debuginfod-client-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-libelf-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-erlang-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-expat-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-file-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-filesystem-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-filesystem-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-file-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-findutils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-fonts-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-forge-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-fpc-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gap-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gawk-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gcc-plugin-annobin-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gcc-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gdb-minimal-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gdbm-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ghc-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-git-core-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glib2-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glib2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-common-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-gconv-extra-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-minimal-langpack-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-static-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gmp-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnat-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnome-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnulib-l10n-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-dirmngr-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-gpg-agent-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-gpgconf-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-keyboxd-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-verify-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnutls-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-filesystem-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-rpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-bin-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-src-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golist-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gpgme-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gpgme-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gpgverify-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-grep-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gzip-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-gpg-keys-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-release-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-repos-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ima-evm-utils-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-info-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-jansson-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-java-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-json-c-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-kernel-headers-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-kernel-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-keyutils-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-krb5-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-less-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libacl-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libarchive-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libasan-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libassuan-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libassuan-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libatomic-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libattr-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libblkid-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libblkid-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libbrotli-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libbtrfsutil-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libbtrfs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcap-ng-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcap-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcbor-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcom-err-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcurl-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libeconf-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libedit-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libevent-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfdisk-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libffi-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libffi-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfido2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfsverity-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgcc-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgcrypt-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgomp-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgpg-error-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgpg-error-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libidn2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libksba-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-liblastlog2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libmount-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libmount-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libmpc-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnghttp2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnghttp3-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnsl2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpfm-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpkgconf-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpsl-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpwquality-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libseccomp-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libseccomp-static-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libseccomp-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libselinux-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libselinux-utils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libselinux-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsemanage-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsepol-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsepol-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsmartcols-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libssh-config-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libssh-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libstdc++-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtasn1-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtirpc-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtool-ltdl-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libubsan-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libunistring-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libusb1-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libuuid-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libverto-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxcrypt-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxcrypt-static-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxcrypt-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxml2-16-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libzstd-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-linkdupes-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lua-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lua-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lz4-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lzo-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-make-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-meson-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-mpdecimal-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-mpfr-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ncurses-base-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ncurses-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-nettle-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ngtcp2-crypto-ossl-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ngtcp2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-npth-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ocaml-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openblas-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openldap-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssh-clients-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssh-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssl-fips-provider-upstream-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssl-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-p11-kit-trust-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-p11-kit-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-package-notes-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pam-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pam-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-patch-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-syntax-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-utf16-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-utf32-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-perl-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-m4-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-pkg-config-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-policycoreutils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-popt-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-publicsuffix-list-dafsa-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pyproject-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python-pip-wheel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-packaging-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-qt5-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-qt6-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-readline-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-redhat-rpm-config-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-build-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-build-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-plugin-selinux-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-sequoia-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-sign-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rust-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sed-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-selinux-policy-targeted-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-selinux-policy-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-setup-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-shadow-utils-subid-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-shadow-utils-subid-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-shadow-utils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sqlite-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sqlite-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sqlite-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sysprof-capture-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-rpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-shared-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-standalone-sysusers-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tar-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tpm2-tss-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tree-sitter-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tzdata-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-unzip-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-util-linux-core-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-util-linux-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-which-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xxhash-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xz-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xz-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zig-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zip-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zlib-ng-compat-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zlib-ng-compat-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zstd-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-aarch64-buildah"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-aarch64-buildah-debuginfo"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-aarch64-buildah-debugsource"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-R-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-add-determinism-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-alternatives-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-annobin-docs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-annobin-plugin-gcc-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ansible-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-audit-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-authselect-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-authselect-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bash-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-binutils-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-btrfs-progs-devel-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-btrfs-progs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-build-reproducibility-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bzip2-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bzip2-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ca-certificates-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cmake-filesystem-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cmake-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-coreutils-common-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-coreutils-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cpio-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cpp-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cracklib-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-crypto-policies-config-default-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-crypto-policies-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-curl-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cyrus-sasl-lib-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-debugedit-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-device-mapper-devel-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-device-mapper-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-device-mapper-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-diffutils-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-dwz-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-e2fsprogs-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ed-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-efi-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-debuginfod-client-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-libelf-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-erlang-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-expat-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-file-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-filesystem-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-filesystem-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-file-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-findutils-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-fonts-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-forge-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-fpc-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gap-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gawk-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gcc-plugin-annobin-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gcc-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gdb-minimal-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gdbm-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ghc-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-git-core-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glib2-devel-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glib2-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-common-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-devel-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-gconv-extra-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-minimal-langpack-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-static-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gmp-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnat-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnome-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnulib-l10n-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-dirmngr-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-gpg-agent-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-gpgconf-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-keyboxd-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-verify-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnutls-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-filesystem-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-rpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-bin-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-src-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golist-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gpgme-devel-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gpgme-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gpgverify-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-grep-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gzip-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-gpg-keys-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-release-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-repos-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ima-evm-utils-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-info-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-jansson-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-java-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-json-c-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-kernel-headers-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-kernel-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-keyutils-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-krb5-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-less-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libacl-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libarchive-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libasan-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libassuan-devel-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libassuan-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libatomic-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libattr-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libblkid-devel-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libblkid-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libbrotli-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libbtrfsutil-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libbtrfs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcap-ng-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcap-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcbor-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcom-err-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcurl-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libeconf-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libedit-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libevent-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfdisk-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libffi-devel-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libffi-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfido2-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfsverity-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgcc-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgcrypt-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgomp-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgpg-error-devel-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgpg-error-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libidn2-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libksba-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-liblastlog2-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libmount-devel-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libmount-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libmpc-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnghttp2-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnghttp3-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnsl2-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpkgconf-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpsl-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpwquality-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libseccomp-devel-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libseccomp-static-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libseccomp-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libselinux-devel-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libselinux-utils-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libselinux-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsemanage-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsepol-devel-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsepol-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsmartcols-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libssh-config-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libssh-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libstdc++-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtasn1-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtirpc-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtool-ltdl-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libubsan-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libunistring-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libusb1-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libuuid-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libverto-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxcrypt-devel-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxcrypt-static-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxcrypt-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxml2-16-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libzstd-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-linkdupes-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lua-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lua-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lz4-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lzo-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-make-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-meson-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-mpdecimal-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-mpfr-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ncurses-base-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ncurses-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-nettle-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ngtcp2-crypto-ossl-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ngtcp2-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-npth-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ocaml-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openblas-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openldap-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssh-clients-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssh-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssl-fips-provider-upstream-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssl-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-p11-kit-trust-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-p11-kit-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-package-notes-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pam-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pam-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-patch-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-devel-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-syntax-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-utf16-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-utf32-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-perl-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-m4-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-pkg-config-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-policycoreutils-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-popt-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-publicsuffix-list-dafsa-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pyproject-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python-pip-wheel-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-packaging-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-qt5-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-qt6-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-readline-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-redhat-rpm-config-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-build-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-build-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-plugin-selinux-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-sequoia-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-sign-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rust-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sed-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-selinux-policy-targeted-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-selinux-policy-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-setup-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-shadow-utils-subid-devel-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-shadow-utils-subid-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-shadow-utils-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sqlite-devel-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sqlite-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sqlite-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sysprof-capture-devel-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-devel-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-rpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-shared-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-standalone-sysusers-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tar-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tpm2-tss-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tree-sitter-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tzdata-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-unzip-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-util-linux-core-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-util-linux-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-which-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xxhash-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xz-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xz-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zig-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zip-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zlib-ng-compat-devel-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zlib-ng-compat-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zstd-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-s390x-buildah"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-s390x-buildah-debuginfo"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-s390x", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-s390x-buildah-debugsource"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-R-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-add-determinism-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-alternatives-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-annobin-docs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-annobin-plugin-gcc-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ansible-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-audit-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-authselect-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-authselect-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bash-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-binutils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-btrfs-progs-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-btrfs-progs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-build-reproducibility-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bzip2-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bzip2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ca-certificates-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cmake-filesystem-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cmake-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-coreutils-common-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-coreutils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cpio-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cpp-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cracklib-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-crypto-policies-config-default-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-crypto-policies-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-curl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cyrus-sasl-lib-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-debugedit-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-device-mapper-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-device-mapper-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-device-mapper-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-diffutils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-dwz-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-e2fsprogs-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ed-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-efi-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-debuginfod-client-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-libelf-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-erlang-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-expat-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-file-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-filesystem-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-filesystem-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-file-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-findutils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-fonts-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-forge-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-fpc-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gap-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gawk-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gcc-plugin-annobin-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gcc-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gdb-minimal-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gdbm-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ghc-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-git-core-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glib2-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glib2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-common-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-gconv-extra-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-minimal-langpack-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-static-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gmp-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnat-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnome-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnulib-l10n-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-dirmngr-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-gpg-agent-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-gpgconf-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-keyboxd-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-verify-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnutls-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-filesystem-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-rpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-bin-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-src-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golist-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gpgme-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gpgme-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gpgverify-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-grep-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gzip-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-gpg-keys-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-release-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-repos-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ima-evm-utils-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-info-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-jansson-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-java-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-json-c-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-kernel-headers-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-kernel-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-keyutils-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-krb5-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-less-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libacl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libarchive-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libassuan-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libassuan-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libatomic-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libattr-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libblkid-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libblkid-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libbrotli-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libbtrfsutil-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libbtrfs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcap-ng-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcap-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcbor-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcom-err-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcurl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libeconf-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libedit-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libevent-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfdisk-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libffi-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libffi-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfido2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfsverity-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgcc-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgcrypt-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgomp-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgpg-error-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgpg-error-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libidn2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libksba-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-liblastlog2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libmount-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libmount-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libmpc-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnghttp2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnghttp3-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnsl2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpfm-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpkgconf-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpsl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpwquality-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libseccomp-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libseccomp-static-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libseccomp-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libselinux-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libselinux-utils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libselinux-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsemanage-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsepol-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsepol-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsmartcols-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libssh-config-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libssh-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libstdc++-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtasn1-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtirpc-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtool-ltdl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libunistring-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libusb1-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libuuid-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libverto-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxcrypt-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxcrypt-static-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxcrypt-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxml2-16-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libzstd-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-linkdupes-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lua-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lua-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lz4-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lzo-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-make-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-meson-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-mpdecimal-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-mpfr-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ncurses-base-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ncurses-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-nettle-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ngtcp2-crypto-ossl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ngtcp2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-npth-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ocaml-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openblas-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openldap-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssh-clients-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssh-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssl-fips-provider-upstream-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssl-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-p11-kit-trust-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-p11-kit-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-package-notes-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pam-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pam-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-patch-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-syntax-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-utf16-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-utf32-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-perl-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-m4-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-pkg-config-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-policycoreutils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-popt-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-publicsuffix-list-dafsa-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pyproject-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python-pip-wheel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-packaging-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-qt5-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-qt6-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-readline-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-redhat-rpm-config-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-build-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-build-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-plugin-selinux-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-sequoia-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-sign-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rust-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sed-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-selinux-policy-targeted-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-selinux-policy-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-setup-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-shadow-utils-subid-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-shadow-utils-subid-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-shadow-utils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sqlite-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sqlite-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sqlite-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sysprof-capture-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-rpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-shared-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-standalone-sysusers-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tar-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tpm2-tss-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tree-sitter-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tzdata-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-unzip-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-util-linux-core-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-util-linux-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-which-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xxhash-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xz-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xz-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zig-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zip-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zlib-ng-compat-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zlib-ng-compat-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zstd-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-x86-64-buildah"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-x86-64-buildah-debuginfo"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-x86-64-buildah-debugsource"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-0020afe78124402d", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-0103bc6211087fec", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-01d869c2158f1316", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-01f0c6d08cadf258", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-capability-03310c18677b51d4", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-06b4df7c9c46894a", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.etcd.io-bbolt-0f9aec18f0070f80", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsouza-go-dockerclient-1120952078b625ba", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-disiqueira-gotree-v3-11f7215c27bd4d77", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-devices-1962d7c069d95dc9", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-1baec04535dcf4bd", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-1ee77ee332aded06", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vishvananda-netlink-20e23125685b4de2", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containers-libtrust-22d54e00fa6bc037", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-youmark-pkcs8-285865ea7f4cb590", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containers-luksy-2a3b441fcfef50db", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-2bb01abb997fe50d", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.podman.io-common-2e8b2ebb13ddb714", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-errors-2f578f7e70238867", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-godbus-dbus-v5-3026c25ff013ad9e", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v2-31fa2a730ffd24e3", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-platforms-355c547ae078d435", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pmezard-go-difflib-362a66aa020df3d8", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-38142e900e78c7b6", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-3886b13fc6616984", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-39375bec3e5afda9", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-distribution-reference-3acf9a16b0be5fe1", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-3c6a164e11b57a47", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-selinux-3d44188fb172b94a", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-414b560d9557ff60", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-connections-41ecf8d5cd80b722", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.podman.io-image-v5-421f0737d6bb7d4a", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-go-archive-445d566bea70949d", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-4e92219a7c0946f1", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbauerster-mpb-v8-4f31d98c3fb7f3e0", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-client-564b825cd87384b7", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-5cdcd85e2f601ac7", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-5d2637dfe4256947", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-openshift-imagebuilder-5da63a30f2e9d243", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-5e74cf7656c46fc2", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-mod-5fa5fdfabb153a20", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-manifoldco-promptui-619fa7e3aa94579b", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-63daee36f399c341", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-specs-go-63f36bb454cae0bc", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-65aa807d9971eb9b", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-676c006ee38fe3df", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-6b570b2073639cad", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mistifyio-go-zfs-v4-6c9b28b713e6fc04", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-6d504b74128cd0be", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-7149d4dd74285a8b", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-miekg-pkcs11-7378222ed82bacab", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-771c15d9e912198b", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-v22-7a5d0d606b0927dd", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-7c4cc245149b2617", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-cgroups-7c6041ab854139e8", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-7d291e472258021f", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-chzyer-readline-7d6736fc6a324c8a", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-801c339287f4ad63", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbauerster-cupwriter-80fc8f48d7a0e4e1", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-units-8158c70f999e9144", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-stargz-snapshotter-estargz-821ab487c983983e", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-84a0ff53fdfcd03b", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-intervals-88bef8551d9e34a2", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbatts-tar-split-89e5f8c806391396", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-8a003b3dd3487a09", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-sigs.k8s.io-yaml-8aa851eabe08b2a2", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-VividCortex-ewma-8b909e3041c77ed0", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-8d700703a04ab5f9", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-davecgh-go-spew-8dbf4a3170e62d8e", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-protobuf-specs-8ec1c134d1569161", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-921840c28a0a356f", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-9265a3db565f0629", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-json-iterator-go-93093e83f9fa3127", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-term-948ddf9f4e374afa", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-94d4d4c06e17f915", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-buildkit-98e4f7d6f08309e4", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-998be4236129bb60", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-seccomp-libseccomp-golang-9f173b7c13ffe432", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-userns-9f865aec64c5184c", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kr-fs-a3149a9eaed83a6d", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-distribution-a3764ae6e8e7f5d1", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-a5af0dff445a1660", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-a7ffc4e5492718a3", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-stdlib-a98a10207e4c5334", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-aa81da1151880334", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runc-aa9944764021d773", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-abc17a7471220476", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aead-serpent-acb3dc9e0e09c500", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-tools-adea2184748fe433", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vishvananda-netns-b2535e341822d8a0", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-fulcio-b55414f36dec4e9e", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-user-b667e3a9a1366bd3", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tchap-go-patricia-v2-b6a0d9354d883533", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-sqlite3-b6fcb30fb37f8f7d", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-bbb709de709a42a6", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gorilla-mux-bf6311fc042b7cf4", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-term-c3e6f629bdd08436", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cyberphone-json-canonicalization-c60ba6050d54fdf3", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-c7d25c9f4a245acd", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-api-c7e07c90d9a15549", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-caa3a6947c4366ee", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-cc7a271ed364e1f2", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-cfb0c27962de2c13", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-d3003717d45bfd7e", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-d30399e7b91b6816", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-proglottis-gpgme-d34351de0fd4a0a5", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-d44550073c939599", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-d4a0172ae3985722", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-d768c945663c7631", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-log-df1190c5b628a5d4", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-dfcf4515f544547e", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-e1e6ac7b2a593d2c", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-e706966db2839d4d", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cloudflare-circl-e85d8632dc67b132", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jinzhu-copier-e8a1bf9d8befc84e", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-smallstep-pkcs7-eb3c55705f3b0d04", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-ec396ff79d516850", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-f1f4e8537b1130d0", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-dario.cat-mergo-f2159732754ee9fe", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containers-ocicrypt-f47106616962145f", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-sftp-f539aa21b60e33b1", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.podman.io-storage-f5e609952f271483", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-compress-f694917e47c49e7e", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-f7f46314964bbf21", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-fa287d98153481a9", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-fa92d73d599800e2", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-faf968f5fa155102", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-stefanberger-go-pkcs11uri-fbb39a61e785f612", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-0020afe78124402d", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-0103bc6211087fec", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-01d869c2158f1316", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-01f0c6d08cadf258", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-capability-03310c18677b51d4", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-06b4df7c9c46894a", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.etcd.io-bbolt-0f9aec18f0070f80", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsouza-go-dockerclient-1120952078b625ba", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-disiqueira-gotree-v3-11f7215c27bd4d77", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-devices-1962d7c069d95dc9", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-1baec04535dcf4bd", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-1ee77ee332aded06", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vishvananda-netlink-20e23125685b4de2", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containers-libtrust-22d54e00fa6bc037", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-youmark-pkcs8-285865ea7f4cb590", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containers-luksy-2a3b441fcfef50db", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-2bb01abb997fe50d", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.podman.io-common-2e8b2ebb13ddb714", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-errors-2f578f7e70238867", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-godbus-dbus-v5-3026c25ff013ad9e", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v2-31fa2a730ffd24e3", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-platforms-355c547ae078d435", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pmezard-go-difflib-362a66aa020df3d8", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-38142e900e78c7b6", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-3886b13fc6616984", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-39375bec3e5afda9", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-distribution-reference-3acf9a16b0be5fe1", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-3c6a164e11b57a47", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-selinux-3d44188fb172b94a", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-414b560d9557ff60", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-connections-41ecf8d5cd80b722", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.podman.io-image-v5-421f0737d6bb7d4a", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-go-archive-445d566bea70949d", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-4e92219a7c0946f1", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbauerster-mpb-v8-4f31d98c3fb7f3e0", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-client-564b825cd87384b7", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-5cdcd85e2f601ac7", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-5d2637dfe4256947", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-openshift-imagebuilder-5da63a30f2e9d243", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-5e74cf7656c46fc2", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-mod-5fa5fdfabb153a20", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-manifoldco-promptui-619fa7e3aa94579b", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-63daee36f399c341", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-specs-go-63f36bb454cae0bc", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-65aa807d9971eb9b", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-676c006ee38fe3df", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-6b570b2073639cad", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-rpm-buildah-6c70d869630a9d5c", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mistifyio-go-zfs-v4-6c9b28b713e6fc04", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-6d504b74128cd0be", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-7149d4dd74285a8b", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-miekg-pkcs11-7378222ed82bacab", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-771c15d9e912198b", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-v22-7a5d0d606b0927dd", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-7c4cc245149b2617", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-cgroups-7c6041ab854139e8", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-7d291e472258021f", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-chzyer-readline-7d6736fc6a324c8a", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-801c339287f4ad63", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbauerster-cupwriter-80fc8f48d7a0e4e1", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-units-8158c70f999e9144", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-stargz-snapshotter-estargz-821ab487c983983e", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-84a0ff53fdfcd03b", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-intervals-88bef8551d9e34a2", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbatts-tar-split-89e5f8c806391396", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-8a003b3dd3487a09", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-sigs.k8s.io-yaml-8aa851eabe08b2a2", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-VividCortex-ewma-8b909e3041c77ed0", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-8d700703a04ab5f9", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-davecgh-go-spew-8dbf4a3170e62d8e", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-protobuf-specs-8ec1c134d1569161", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-921840c28a0a356f", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-9265a3db565f0629", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-json-iterator-go-93093e83f9fa3127", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-term-948ddf9f4e374afa", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-94d4d4c06e17f915", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-buildkit-98e4f7d6f08309e4", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-998be4236129bb60", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-seccomp-libseccomp-golang-9f173b7c13ffe432", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-userns-9f865aec64c5184c", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kr-fs-a3149a9eaed83a6d", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-distribution-a3764ae6e8e7f5d1", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-a5af0dff445a1660", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-a7ffc4e5492718a3", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-stdlib-a98a10207e4c5334", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-aa81da1151880334", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runc-aa9944764021d773", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-abc17a7471220476", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aead-serpent-acb3dc9e0e09c500", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-tools-adea2184748fe433", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vishvananda-netns-b2535e341822d8a0", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-fulcio-b55414f36dec4e9e", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-user-b667e3a9a1366bd3", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tchap-go-patricia-v2-b6a0d9354d883533", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-sqlite3-b6fcb30fb37f8f7d", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-bbb709de709a42a6", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gorilla-mux-bf6311fc042b7cf4", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-term-c3e6f629bdd08436", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cyberphone-json-canonicalization-c60ba6050d54fdf3", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-c7d25c9f4a245acd", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-api-c7e07c90d9a15549", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-caa3a6947c4366ee", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-cc7a271ed364e1f2", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-cfb0c27962de2c13", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-d3003717d45bfd7e", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-d30399e7b91b6816", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-proglottis-gpgme-d34351de0fd4a0a5", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-d44550073c939599", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-d4a0172ae3985722", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-d768c945663c7631", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-log-df1190c5b628a5d4", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-dfcf4515f544547e", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-e1e6ac7b2a593d2c", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-e706966db2839d4d", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cloudflare-circl-e85d8632dc67b132", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jinzhu-copier-e8a1bf9d8befc84e", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-smallstep-pkcs7-eb3c55705f3b0d04", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-ec396ff79d516850", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-f1f4e8537b1130d0", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-dario.cat-mergo-f2159732754ee9fe", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containers-ocicrypt-f47106616962145f", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-sftp-f539aa21b60e33b1", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.podman.io-storage-f5e609952f271483", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-compress-f694917e47c49e7e", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-f7f46314964bbf21", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-fa287d98153481a9", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-fa92d73d599800e2", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-faf968f5fa155102", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-stefanberger-go-pkcs11uri-fbb39a61e785f612", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-rpm-buildah-6c70d869630a9d5c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-dario.cat-mergo-f2159732754ee9fe", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-f1f4e8537b1130d0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-d30399e7b91b6816", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-VividCortex-ewma-8b909e3041c77ed0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-faf968f5fa155102", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aead-serpent-acb3dc9e0e09c500", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-aa81da1151880334", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-chzyer-readline-7d6736fc6a324c8a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-e706966db2839d4d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cloudflare-circl-e85d8632dc67b132", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-errdefs-38142e900e78c7b6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-fa287d98153481a9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-log-df1190c5b628a5d4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-platforms-355c547ae078d435", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-stargz-snapshotter-estargz-821ab487c983983e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-abc17a7471220476", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containers-libtrust-22d54e00fa6bc037", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containers-luksy-2a3b441fcfef50db", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containers-ocicrypt-f47106616962145f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-v22-7a5d0d606b0927dd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cyberphone-json-canonicalization-c60ba6050d54fdf3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-7d291e472258021f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-davecgh-go-spew-8dbf4a3170e62d8e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-disiqueira-gotree-v3-11f7215c27bd4d77", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-distribution-reference-3acf9a16b0be5fe1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-distribution-a3764ae6e8e7f5d1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-998be4236129bb60", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-go-connections-41ecf8d5cd80b722", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-go-units-8158c70f999e9144", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-cc7a271ed364e1f2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-8d700703a04ab5f9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fsouza-go-dockerclient-1120952078b625ba", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-801c339287f4ad63", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-logr-0020afe78124402d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-stdr-921840c28a0a356f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-godbus-dbus-v5-3026c25ff013ad9e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-fa92d73d599800e2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-intervals-88bef8551d9e34a2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-uuid-a5af0dff445a1660", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gorilla-mux-bf6311fc042b7cf4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-8a003b3dd3487a09", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-414b560d9557ff60", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jinzhu-copier-e8a1bf9d8befc84e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-json-iterator-go-93093e83f9fa3127", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-klauspost-compress-f694917e47c49e7e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-01f0c6d08cadf258", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-kr-fs-a3149a9eaed83a6d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-manifoldco-promptui-619fa7e3aa94579b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-d4a0172ae3985722", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-2bb01abb997fe50d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-sqlite3-b6fcb30fb37f8f7d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-miekg-pkcs11-7378222ed82bacab", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mistifyio-go-zfs-v4-6c9b28b713e6fc04", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-buildkit-98e4f7d6f08309e4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-01d869c2158f1316", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-go-archive-445d566bea70949d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-moby-api-c7e07c90d9a15549", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-moby-client-564b825cd87384b7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-e1e6ac7b2a593d2c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-capability-03310c18677b51d4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-devices-1962d7c069d95dc9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-7c4cc245149b2617", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-caa3a6947c4366ee", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-user-b667e3a9a1366bd3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-userns-9f865aec64c5184c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-term-948ddf9f4e374afa", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-f7f46314964bbf21", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-bbb709de709a42a6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-cgroups-7c6041ab854139e8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-6b570b2073639cad", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-06b4df7c9c46894a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-runc-aa9944764021d773", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-d44550073c939599", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-tools-adea2184748fe433", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-selinux-3d44188fb172b94a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-openshift-imagebuilder-5da63a30f2e9d243", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-errors-2f578f7e70238867", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-sftp-f539aa21b60e33b1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-5e74cf7656c46fc2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pmezard-go-difflib-362a66aa020df3d8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-proglottis-gpgme-d34351de0fd4a0a5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-seccomp-libseccomp-golang-9f173b7c13ffe432", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-cfb0c27962de2c13", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sigstore-fulcio-b55414f36dec4e9e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sigstore-protobuf-specs-8ec1c134d1569161", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-d3003717d45bfd7e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-ec396ff79d516850", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-smallstep-pkcs7-eb3c55705f3b0d04", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-cobra-771c15d9e912198b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-pflag-63daee36f399c341", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-stefanberger-go-pkcs11uri-fbb39a61e785f612", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-dfcf4515f544547e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tchap-go-patricia-v2-b6a0d9354d883533", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-3c6a164e11b57a47", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-39375bec3e5afda9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vbatts-tar-split-89e5f8c806391396", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vbauerster-cupwriter-80fc8f48d7a0e4e1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vbauerster-mpb-v8-4f31d98c3fb7f3e0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vishvananda-netlink-20e23125685b4de2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vishvananda-netns-b2535e341822d8a0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-youmark-pkcs8-285865ea7f4cb590", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.etcd.io-bbolt-0f9aec18f0070f80", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-d768c945663c7631", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-65aa807d9971eb9b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-9265a3db565f0629", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-676c006ee38fe3df", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-3886b13fc6616984", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-182dacbf1509af1c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-common-2e8b2ebb13ddb714", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-image-v5-421f0737d6bb7d4a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-storage-f5e609952f271483", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.yaml.in-yaml-v2-31fa2a730ffd24e3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-7149d4dd74285a8b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-crypto-6d504b74128cd0be", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-mod-5fa5fdfabb153a20", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-net-1ee77ee332aded06", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sync-c7d25c9f4a245acd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sys-0103bc6211087fec", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-term-c3e6f629bdd08436", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-text-5cdcd85e2f601ac7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-a7ffc4e5492718a3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-84a0ff53fdfcd03b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-grpc-5d2637dfe4256947", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-protobuf-4e92219a7c0946f1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-94d4d4c06e17f915", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-sigs.k8s.io-yaml-8aa851eabe08b2a2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-stdlib-a98a10207e4c5334", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-1baec04535dcf4bd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-specs-go-63f36bb454cae0bc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-aarch64-buildah", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.aarch64"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-00228dc90922d7a8", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-0252838cbbb07f3e", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-smallstep-pkcs7-02b22be6cb71a71a", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-compress-02da361f7eaac64a", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-stale-04f27f671e49a252", "relatedSpdxElement": "SPDXRef-File-....github-workflows-stale.yml-78b6c7eb36262580", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.etcd.io-bbolt-053aa1d76845cfe0", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-06a691dc2819f8aa", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-VividCortex-ewma-06ba2bb85d7db359", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-stefanberger-go-pkcs11uri-0ab52bead0039fd9", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v2-0aba9b8903bc6dd6", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-0c7a66d3277dd6ea", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-upload-artifact-0dff52be73641f10", "relatedSpdxElement": "SPDXRef-File-....github-workflows-lima.yml-59b5cd4280d1856d", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-0e5964a7ba20da05", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-sftp-12ea976afd3c9be6", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-checkout-13b3c98fc1379020", "relatedSpdxElement": "SPDXRef-File-....github-workflows-lima.yml-59b5cd4280d1856d", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-workflow-.-.github-workflows-lima.yml-15a82663c9dba3c9", "relatedSpdxElement": "SPDXRef-File-....github-workflows-ci.yml-c36761807c3b3a00", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mistifyio-go-zfs-v4-174ae057fa81b631", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-19e3ecfb81a0d2bc", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-upload-artifact-1c57fd226530a50d", "relatedSpdxElement": "SPDXRef-File-....github-workflows-ci.yml-c36761807c3b3a00", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runc-1efa7d3515126922", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-units-1f460b1805fe5c3c", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.podman.io-common-21236ecfcd1c15ca", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-22c346abff5e71aa", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-23f68f22a35fcae5", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pmezard-go-difflib-25963aceaa6dfd23", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-buildkit-25f139ca82311e66", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-davecgh-go-spew-262622bf95c8865c", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-2832745d82445e27", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-2a85c5ac5f84c365", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-2c219eddaf3f07cd", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cyphar.com-go-pathrs-2d8e4ec86d2e5382", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-2ea99c0c77bf9ebc", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-stargz-snapshotter-estargz-2fe9b3a2c1e710e7", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-term-3099125c5a87befb", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-3167543e7b3246f7", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-32bd7ae500ba8634", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-3452f5fe9f6690fd", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbauerster-mpb-v8-3612c02f29a75362", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-39820517e2ec8bc2", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-fulcio-3b8471856bdaf854", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-3c6d280ffe97a035", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-40bcae7fb951c375", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.podman.io-storage-41ee67f7b84eb07a", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-client-4436f2b2794cb57d", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-460abf6e1309fb4a", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-errors-474bf2f388afe342", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-49c66f63cdf58c81", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-4ad008ccfda82364", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-4d18e88db2531fed", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-4e2185f4fcb4c512", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-json-iterator-go-508911173678cba3", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-5166c6dbad928efe", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vishvananda-netns-53c4e6214f2cc0f7", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-55b983922c9b1f8f", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-596cc87a8ff1183e", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Microsoft-go-winio-59cafe4b91df1cf1", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-distribution-5b8ce5965703947b", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-5d4e4539d61c9e54", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-dorny-paths-filter-611f48a2055c57a6", "relatedSpdxElement": "SPDXRef-File-....github-workflows-ci.yml-c36761807c3b3a00", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-616958b158d1a1b8", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-lima-vm-lima-actions-setup-61d7289d94fb9c5f", "relatedSpdxElement": "SPDXRef-File-....github-workflows-lima.yml-59b5cd4280d1856d", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-specs-go-6255947a73f8217d", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-mod-62825d283e5b165a", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-62ad0a986b9411dc", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-63c5ebe7885ef18d", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-tools-64a82c01af80da5e", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-log-64de32bccd000255", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containers-libtrust-675d43ee0d59d44a", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-inconshreveable-mousetrap-6accf35c39498b1e", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Azure-go-ansiterm-6bea16b82bcc34e8", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tchap-go-patricia-v2-6df09934d5ac3fdd", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-701c746189c7eb97", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-user-72ffaed3df287dfe", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-selinux-7387e4f3f706d28f", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-manifoldco-promptui-73a371a9b058a18c", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-protobuf-specs-74889e271e2caf3d", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cyberphone-json-canonicalization-76e06993d0f0c08e", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containers-ocicrypt-7d54cc1d2f0cf937", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-devices-7ef390d738a70f55", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-8031c1a1c2921dde", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-openshift-imagebuilder-81b345862fd745b5", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-sqlite3-83ea74103aea903a", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-84b8482d66366887", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cpuguy83-go-md2man-v2-8541acd97ec83901", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-tests-tools-go.mod-d7854cf55ce9efd9", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-861b2232b9b63ca1", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kr-fs-874b8e48251aabf6", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gorilla-mux-87b8ff0a59e2e3c6", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-8979a333bb24fb3b", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-8a5147188280b8ba", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-8bc51ea2f12f3837", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-python-codespell-90cdfc7d885a6555", "relatedSpdxElement": "SPDXRef-File-...otel-requirements.txt-499c8ee119bf2901", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-9e79f6582c7104e4", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-9fc7888039937818", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-a1fe40363b85f0e2", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-seccomp-libseccomp-golang-a5cb543cf0960336", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbauerster-cupwriter-a5d802201b35ea8c", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vishvananda-netlink-a75c27634d6eac1f", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-a9e87098c205ea17", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-b15c3f1db2032118", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jinzhu-copier-b1e1b8476b551d13", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-setup-go-b3faae15ddb8a4c7", "relatedSpdxElement": "SPDXRef-File-....github-workflows-ci.yml-c36761807c3b3a00", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-dario.cat-mergo-bb7ea264dc855694", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-bfaf5559d1935089", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-cgroups-c4db25b2532edbe7", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-godbus-dbus-v5-c57363089f17a748", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-k8s.io-klog-c6175f681b47d672", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-c6c431023327850f", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsouza-go-dockerclient-c954f8996149cb7a", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-russross-blackfriday-v2-ca0b42e616d3a00a", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-tests-tools-go.mod-d7854cf55ce9efd9", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-cd8e5a71669b8eaa", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-cdebc2e8006c92cc", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.podman.io-image-v5-ce30e55fd246afdf", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-checkout-ce9d12084d1daaed", "relatedSpdxElement": "SPDXRef-File-....github-workflows-ci.yml-c36761807c3b3a00", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-sigs.k8s.io-yaml-d050975696bfbe02", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-workflow-podman-container-tools-podman-.github-workflows-issue-pr-lock.yml-d1635a02b62bddcc", "relatedSpdxElement": "SPDXRef-File-....github-workflows-issue-pr-lock.yml-32351997c25d719b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-capability-d2489a1dc937ae05", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-d32685516e140603", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-api-d68b54481da65a50", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-d6bc6c47287c2f41", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-d6f43d57d72aea1c", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-youmark-pkcs8-d7ecada3f86576aa", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-intervals-d7f354a04a4c6880", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-d8112a4cda175f3c", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-disiqueira-gotree-v3-d84dc1568812a310", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbatts-tar-split-dc04ca8c69b0ef96", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-v22-dc3a5de68ba3a95d", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-miekg-pkcs11-dc5b826e6f14bbe9", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-connections-dfac74681558c2d8", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-dff33bba7b72fa5f", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-e09b530c0eb878f7", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cloudflare-circl-e1be76f73421a35f", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-stretchr-testify-e1f9a8f1eeda28da", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-e3211d5469af8c26", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-distribution-reference-e48a8505fd267500", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-chzyer-readline-ea3c8d91ff897fe6", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aead-serpent-f32a1a590756ecf5", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-f3c4f942d1d27a73", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-platforms-f71bc177852bb0ec", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-f8fcfa03fbcf24fe", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containers-luksy-fab6ac09e5fdfcd9", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-userns-fb077919511efaf2", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-term-fc8984f0380c7b24", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-fc8a990ed94de460", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-fdaf37d35db282f5", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-go-archive-ff1d97ee9e90217b", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-proglottis-gpgme-ff56132de51ac46c", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-workflow-.-.github-workflows-lima.yml-15a82663c9dba3c9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-checkout-ce9d12084d1daaed", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-checkout-13b3c98fc1379020", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-setup-go-b3faae15ddb8a4c7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-stale-04f27f671e49a252", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-upload-artifact-1c57fd226530a50d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-upload-artifact-0dff52be73641f10", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-python-codespell-90cdfc7d885a6555", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-cyphar.com-go-pathrs-2d8e4ec86d2e5382", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-dario.cat-mergo-bb7ea264dc855694", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-dorny-paths-filter-611f48a2055c57a6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Azure-go-ansiterm-6bea16b82bcc34e8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-d32685516e140603", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Microsoft-go-winio-59cafe4b91df1cf1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-23f68f22a35fcae5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-VividCortex-ewma-06ba2bb85d7db359", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-55b983922c9b1f8f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aead-serpent-f32a1a590756ecf5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-a9e87098c205ea17", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-chzyer-readline-ea3c8d91ff897fe6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-8979a333bb24fb3b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cloudflare-circl-e1be76f73421a35f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-errdefs-0252838cbbb07f3e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-fdaf37d35db282f5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-log-64de32bccd000255", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-platforms-f71bc177852bb0ec", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-stargz-snapshotter-estargz-2fe9b3a2c1e710e7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-84b8482d66366887", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containers-libtrust-675d43ee0d59d44a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containers-luksy-fab6ac09e5fdfcd9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containers-ocicrypt-7d54cc1d2f0cf937", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-v22-dc3a5de68ba3a95d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cpuguy83-go-md2man-v2-8541acd97ec83901", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cyberphone-json-canonicalization-76e06993d0f0c08e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-f8fcfa03fbcf24fe", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-davecgh-go-spew-262622bf95c8865c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-disiqueira-gotree-v3-d84dc1568812a310", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-distribution-reference-e48a8505fd267500", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-distribution-5b8ce5965703947b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-63c5ebe7885ef18d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-go-connections-dfac74681558c2d8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-go-units-1f460b1805fe5c3c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-22c346abff5e71aa", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-4e2185f4fcb4c512", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fsouza-go-dockerclient-c954f8996149cb7a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-cd8e5a71669b8eaa", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-logr-0e5964a7ba20da05", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-stdr-cdebc2e8006c92cc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-godbus-dbus-v5-c57363089f17a748", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-3c6d280ffe97a035", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-intervals-d7f354a04a4c6880", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-uuid-d6bc6c47287c2f41", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gorilla-mux-87b8ff0a59e2e3c6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-596cc87a8ff1183e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-19e3ecfb81a0d2bc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-inconshreveable-mousetrap-6accf35c39498b1e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jinzhu-copier-b1e1b8476b551d13", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-json-iterator-go-508911173678cba3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-klauspost-compress-02da361f7eaac64a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-d6f43d57d72aea1c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-kr-fs-874b8e48251aabf6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-manifoldco-promptui-73a371a9b058a18c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-d8112a4cda175f3c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-00228dc90922d7a8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-sqlite3-83ea74103aea903a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-miekg-pkcs11-dc5b826e6f14bbe9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mistifyio-go-zfs-v4-174ae057fa81b631", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-buildkit-25f139ca82311e66", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-861b2232b9b63ca1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-go-archive-ff1d97ee9e90217b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-moby-api-d68b54481da65a50", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-moby-client-4436f2b2794cb57d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-32bd7ae500ba8634", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-capability-d2489a1dc937ae05", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-devices-7ef390d738a70f55", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-2ea99c0c77bf9ebc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-9e79f6582c7104e4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-user-72ffaed3df287dfe", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-userns-fb077919511efaf2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-term-3099125c5a87befb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-4ad008ccfda82364", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-62ad0a986b9411dc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-cgroups-c4db25b2532edbe7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-39820517e2ec8bc2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-fc8a990ed94de460", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-runc-1efa7d3515126922", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-49c66f63cdf58c81", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-tools-64a82c01af80da5e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-selinux-7387e4f3f706d28f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-openshift-imagebuilder-81b345862fd745b5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-errors-474bf2f388afe342", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-sftp-12ea976afd3c9be6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-b15c3f1db2032118", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pmezard-go-difflib-25963aceaa6dfd23", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-proglottis-gpgme-ff56132de51ac46c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-russross-blackfriday-v2-ca0b42e616d3a00a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-seccomp-libseccomp-golang-a5cb543cf0960336", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-2c219eddaf3f07cd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sigstore-fulcio-3b8471856bdaf854", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sigstore-protobuf-specs-74889e271e2caf3d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-f3c4f942d1d27a73", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-9fc7888039937818", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-smallstep-pkcs7-02b22be6cb71a71a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-cobra-701c746189c7eb97", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-pflag-a1fe40363b85f0e2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-stefanberger-go-pkcs11uri-0ab52bead0039fd9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-stretchr-testify-e1f9a8f1eeda28da", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-e3211d5469af8c26", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tchap-go-patricia-v2-6df09934d5ac3fdd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-2832745d82445e27", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-bfaf5559d1935089", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vbatts-tar-split-dc04ca8c69b0ef96", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vbauerster-cupwriter-a5d802201b35ea8c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vbauerster-mpb-v8-3612c02f29a75362", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vishvananda-netlink-a75c27634d6eac1f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vishvananda-netns-53c4e6214f2cc0f7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-youmark-pkcs8-d7ecada3f86576aa", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.etcd.io-bbolt-053aa1d76845cfe0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-dff33bba7b72fa5f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-8bc51ea2f12f3837", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-8031c1a1c2921dde", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-3452f5fe9f6690fd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-460abf6e1309fb4a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-common-21236ecfcd1c15ca", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-image-v5-ce30e55fd246afdf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-storage-41ee67f7b84eb07a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.yaml.in-yaml-v2-0aba9b8903bc6dd6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-5d4e4539d61c9e54", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-crypto-4d18e88db2531fed", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-mod-62825d283e5b165a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-net-e09b530c0eb878f7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sync-2a85c5ac5f84c365", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sys-06a691dc2819f8aa", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-term-fc8984f0380c7b24", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-text-40bcae7fb951c375", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-0c7a66d3277dd6ea", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-5166c6dbad928efe", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-grpc-8a5147188280b8ba", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-protobuf-c6c431023327850f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-616958b158d1a1b8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-k8s.io-klog-c6175f681b47d672", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-lima-vm-lima-actions-setup-61d7289d94fb9c5f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-workflow-podman-container-tools-podman-.github-workflows-issue-pr-lock.yml-d1635a02b62bddcc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-sigs.k8s.io-yaml-d050975696bfbe02", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-3167543e7b3246f7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-specs-go-6255947a73f8217d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.src"}, {"spdxElementId": "SPDXRef-Package-rpm-buildah-9d3bb49d2b16d861", "relatedSpdxElement": "SPDXRef-File-...buildah-1.45.1-1.1.hum1.aarch64.debug-9eb15296ea7b344a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-debuginfo-1.45.1-1.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-rpm-buildah-9d3bb49d2b16d861", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-buildah-debuginfo-1.45.1-1.1.hum1.aarch64", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-aarch64-buildah-debuginfo", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-buildah-debuginfo-1.45.1-1.1.hum1.aarch64"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-buildah-debugsource-1.45.1-1.1.hum1.aarch64", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-aarch64-buildah-debugsource", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-buildah-debugsource-1.45.1-1.1.hum1.aarch64"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-018c25d0ade7e2c3", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-01d68c0aa81719f1", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containers-libtrust-0219a066024e2be2", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-fulcio-055469e0a812dc47", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-059d6988e78432f0", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containers-ocicrypt-07b9f07485e23d3e", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-08515491417b43af", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-08e3631689ba2666", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.podman.io-storage-0a99f258bf2a5922", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mistifyio-go-zfs-v4-0b1965e2474cb83d", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-0b33f09b0f5b838a", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-devices-0bba930954dfcd6c", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-0c01821ce8bcc054", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-go-archive-0c66a72217abfab4", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cloudflare-circl-15805c8eea3e0e3b", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v2-15f6e682125c405a", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-davecgh-go-spew-18581646c4331057", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-18a675eeb9f4e629", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbauerster-cupwriter-1989f476230e1144", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-chzyer-readline-1a4812ac60d2334b", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-proglottis-gpgme-1b49a4f27b657544", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-disiqueira-gotree-v3-1b5e5f55beeb478a", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gorilla-mux-1c0b646c6d1fc7dd", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-sqlite3-1d9f2fc919664cd0", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-godbus-dbus-v5-1de1b436a623a1df", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbauerster-mpb-v8-1dfe16a4313124e5", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-seccomp-libseccomp-golang-2016e4e0d7586413", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-229bb65cc4ad4827", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.podman.io-image-v5-267b15fe286d196b", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-29b6f5378058b12b", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-log-2e1ff1104407958d", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-miekg-pkcs11-2fedfb0706e60eae", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-31aa36887e373f59", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jinzhu-copier-3754b98eaa9b451b", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-37b74d847f8a82f7", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-protobuf-specs-380957910dde1b24", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pmezard-go-difflib-387720a75b8598d1", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vishvananda-netns-38e469665e6c90ed", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-3ca165c40a362bf0", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-3cf9b8a5cb414ee7", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-42fdba04b2372867", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-43d35aa1eaa7761e", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-compress-47f130b840af0c6b", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-selinux-48507f97bdaa1c57", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-4a24748621c4e873", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-527b3310cfd122ca", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-53a054d1ec59624e", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-v22-5739d8e9fe1ed748", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-dario.cat-mergo-59174a8be3ac1a4b", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-5bf29773c312e0ad", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-5bf6c8bb05ac89b7", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-stargz-snapshotter-estargz-5f3e889749124cdf", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-VividCortex-ewma-696620e3c696ce29", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-buildkit-6c482327d253f511", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-712326ff377490d4", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-75cb972dc77cea49", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aead-serpent-7772991f9d1da505", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-capability-7c6481407411f8a5", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-7d354c35757c8f27", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-units-7d5dc6a92bc12fb9", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-7e91e372745aed58", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbatts-tar-split-7f14f580c48489cb", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-85b5eb3c1e96c95a", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-87530f6059cddcf0", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsouza-go-dockerclient-8963f2ae066c3177", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-8d9f3a471e783be0", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containers-luksy-8e5a6f7c88fdea9a", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-9210387e6b6f8833", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-userns-932829a91f1b5bd1", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-95e4a149ea37b0f8", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-97db166f3446b2fb", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-98357687696b1248", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-errors-9a1788200a951e1e", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-platforms-9e20e064ab3caf44", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-term-9f3261e1d3e7fb1f", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-user-a15a283dcb24b8c6", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-a21881fc809e6f28", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-sftp-a235888e464efa60", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-a56c4f15b894bac0", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-openshift-imagebuilder-a6c745ca54da8046", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-term-a852b1b5097c9583", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-stdlib-a98a10207e4c5334", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-stefanberger-go-pkcs11uri-aba4c2304f554dbb", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-acb66c2b7614606b", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vishvananda-netlink-ae2f00a5e23588cb", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-afcc0ec1d847a1ed", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-b0810765ac9c152a", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-b1700612bf15a3c4", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-b22b4ef8adaed18a", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tchap-go-patricia-v2-b5cd62a95c06a53a", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-distribution-b615122c683e6ef8", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-b6727d40732fcfdb", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.podman.io-common-b73d64e1e1f026ad", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-b8fb128fb39709d8", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-b9defaad287b6e42", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-manifoldco-promptui-be5c7e8d67a5620a", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-intervals-bf261685037e7e6b", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-mod-c049e0e8da24e549", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-c064a8fc75a6a695", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-connections-c49fee52019d39db", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-specs-go-c5150a5acd89f695", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-c831ec94f75811d3", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-ca0a97a4e41c9301", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-ca792a3e0fe9340d", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runc-cbba0bf37528e6c2", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-cd344c9f36efaa74", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-api-ce84eba3654eaadc", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-ce982cc286d48283", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kr-fs-d161d144cbab4450", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-d6b0fdf738acfb72", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-d8327e3c1ea4b3aa", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-tools-dc4457a5eefde152", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-smallstep-pkcs7-e1feedc200050271", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-json-iterator-go-e29ead619ca012f6", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-e57e4670efd62048", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-sigs.k8s.io-yaml-e77a905e15771fbf", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-distribution-reference-e90ad8b51d3c2dd4", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.etcd.io-bbolt-e99c005027529491", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-eb963611a7a72b34", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-cgroups-ec5ecc501ede6e55", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cyberphone-json-canonicalization-ed6ce3555983c0b2", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-eef9fcfc6bd61b8a", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-f636f20b22a93382", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-f6ad4daf31685f64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-f84998d4af573262", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-youmark-pkcs8-f938c1f9a8cf24cd", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-client-fd01e53191ad1d36", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-fe3b88426627c239", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-018c25d0ade7e2c3", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-01d68c0aa81719f1", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containers-libtrust-0219a066024e2be2", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-fulcio-055469e0a812dc47", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-059d6988e78432f0", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containers-ocicrypt-07b9f07485e23d3e", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-08515491417b43af", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-08e3631689ba2666", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.podman.io-storage-0a99f258bf2a5922", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mistifyio-go-zfs-v4-0b1965e2474cb83d", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-0b33f09b0f5b838a", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-devices-0bba930954dfcd6c", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-0c01821ce8bcc054", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-go-archive-0c66a72217abfab4", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cloudflare-circl-15805c8eea3e0e3b", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v2-15f6e682125c405a", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-davecgh-go-spew-18581646c4331057", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-18a675eeb9f4e629", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbauerster-cupwriter-1989f476230e1144", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-chzyer-readline-1a4812ac60d2334b", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-proglottis-gpgme-1b49a4f27b657544", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-disiqueira-gotree-v3-1b5e5f55beeb478a", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gorilla-mux-1c0b646c6d1fc7dd", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-sqlite3-1d9f2fc919664cd0", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-godbus-dbus-v5-1de1b436a623a1df", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbauerster-mpb-v8-1dfe16a4313124e5", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-seccomp-libseccomp-golang-2016e4e0d7586413", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-229bb65cc4ad4827", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.podman.io-image-v5-267b15fe286d196b", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-29b6f5378058b12b", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-log-2e1ff1104407958d", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-miekg-pkcs11-2fedfb0706e60eae", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-31aa36887e373f59", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jinzhu-copier-3754b98eaa9b451b", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-37b74d847f8a82f7", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-protobuf-specs-380957910dde1b24", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pmezard-go-difflib-387720a75b8598d1", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vishvananda-netns-38e469665e6c90ed", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-3ca165c40a362bf0", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-3cf9b8a5cb414ee7", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-42fdba04b2372867", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-43d35aa1eaa7761e", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-compress-47f130b840af0c6b", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-selinux-48507f97bdaa1c57", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-4a24748621c4e873", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-527b3310cfd122ca", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-53a054d1ec59624e", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-v22-5739d8e9fe1ed748", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-dario.cat-mergo-59174a8be3ac1a4b", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-5bf29773c312e0ad", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-5bf6c8bb05ac89b7", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-stargz-snapshotter-estargz-5f3e889749124cdf", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-rpm-buildah-66a40dc1c37ca369", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-VividCortex-ewma-696620e3c696ce29", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-buildkit-6c482327d253f511", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-712326ff377490d4", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-75cb972dc77cea49", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aead-serpent-7772991f9d1da505", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-capability-7c6481407411f8a5", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-7d354c35757c8f27", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-units-7d5dc6a92bc12fb9", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-7e91e372745aed58", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbatts-tar-split-7f14f580c48489cb", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-85b5eb3c1e96c95a", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-87530f6059cddcf0", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsouza-go-dockerclient-8963f2ae066c3177", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-8d9f3a471e783be0", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containers-luksy-8e5a6f7c88fdea9a", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-9210387e6b6f8833", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-userns-932829a91f1b5bd1", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-95e4a149ea37b0f8", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-97db166f3446b2fb", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-98357687696b1248", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-errors-9a1788200a951e1e", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-platforms-9e20e064ab3caf44", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-term-9f3261e1d3e7fb1f", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-user-a15a283dcb24b8c6", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-a21881fc809e6f28", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-sftp-a235888e464efa60", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-a56c4f15b894bac0", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-openshift-imagebuilder-a6c745ca54da8046", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-term-a852b1b5097c9583", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-stdlib-a98a10207e4c5334", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-stefanberger-go-pkcs11uri-aba4c2304f554dbb", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-acb66c2b7614606b", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vishvananda-netlink-ae2f00a5e23588cb", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-afcc0ec1d847a1ed", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-b0810765ac9c152a", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-b1700612bf15a3c4", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-b22b4ef8adaed18a", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tchap-go-patricia-v2-b5cd62a95c06a53a", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-distribution-b615122c683e6ef8", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-b6727d40732fcfdb", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.podman.io-common-b73d64e1e1f026ad", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-b8fb128fb39709d8", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-b9defaad287b6e42", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-manifoldco-promptui-be5c7e8d67a5620a", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-intervals-bf261685037e7e6b", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-mod-c049e0e8da24e549", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-c064a8fc75a6a695", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-connections-c49fee52019d39db", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-specs-go-c5150a5acd89f695", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-c831ec94f75811d3", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-ca0a97a4e41c9301", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-ca792a3e0fe9340d", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runc-cbba0bf37528e6c2", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-cd344c9f36efaa74", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-api-ce84eba3654eaadc", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-ce982cc286d48283", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kr-fs-d161d144cbab4450", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-d6b0fdf738acfb72", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-d8327e3c1ea4b3aa", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-tools-dc4457a5eefde152", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-smallstep-pkcs7-e1feedc200050271", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-json-iterator-go-e29ead619ca012f6", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-e57e4670efd62048", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-sigs.k8s.io-yaml-e77a905e15771fbf", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-distribution-reference-e90ad8b51d3c2dd4", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.etcd.io-bbolt-e99c005027529491", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-eb963611a7a72b34", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-cgroups-ec5ecc501ede6e55", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cyberphone-json-canonicalization-ed6ce3555983c0b2", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-eef9fcfc6bd61b8a", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-f636f20b22a93382", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-f6ad4daf31685f64", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-f84998d4af573262", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-youmark-pkcs8-f938c1f9a8cf24cd", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-client-fd01e53191ad1d36", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-fe3b88426627c239", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-rpm-buildah-66a40dc1c37ca369", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-dario.cat-mergo-59174a8be3ac1a4b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-ca0a97a4e41c9301", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-42fdba04b2372867", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-VividCortex-ewma-696620e3c696ce29", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-97db166f3446b2fb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aead-serpent-7772991f9d1da505", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-ca792a3e0fe9340d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-chzyer-readline-1a4812ac60d2334b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-0c01821ce8bcc054", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cloudflare-circl-15805c8eea3e0e3b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-errdefs-37b74d847f8a82f7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-b1700612bf15a3c4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-log-2e1ff1104407958d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-platforms-9e20e064ab3caf44", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-stargz-snapshotter-estargz-5f3e889749124cdf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-29b6f5378058b12b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containers-libtrust-0219a066024e2be2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containers-luksy-8e5a6f7c88fdea9a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containers-ocicrypt-07b9f07485e23d3e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-v22-5739d8e9fe1ed748", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cyberphone-json-canonicalization-ed6ce3555983c0b2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-527b3310cfd122ca", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-davecgh-go-spew-18581646c4331057", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-disiqueira-gotree-v3-1b5e5f55beeb478a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-distribution-reference-e90ad8b51d3c2dd4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-distribution-b615122c683e6ef8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-31aa36887e373f59", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-go-connections-c49fee52019d39db", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-go-units-7d5dc6a92bc12fb9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-229bb65cc4ad4827", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-f6ad4daf31685f64", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fsouza-go-dockerclient-8963f2ae066c3177", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-f636f20b22a93382", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-logr-b8fb128fb39709d8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-stdr-b0810765ac9c152a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-godbus-dbus-v5-1de1b436a623a1df", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-7d354c35757c8f27", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-intervals-bf261685037e7e6b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-uuid-c064a8fc75a6a695", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gorilla-mux-1c0b646c6d1fc7dd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-059d6988e78432f0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-75cb972dc77cea49", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jinzhu-copier-3754b98eaa9b451b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-json-iterator-go-e29ead619ca012f6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-klauspost-compress-47f130b840af0c6b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-afcc0ec1d847a1ed", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-kr-fs-d161d144cbab4450", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-manifoldco-promptui-be5c7e8d67a5620a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-08515491417b43af", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-98357687696b1248", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-sqlite3-1d9f2fc919664cd0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-miekg-pkcs11-2fedfb0706e60eae", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mistifyio-go-zfs-v4-0b1965e2474cb83d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-buildkit-6c482327d253f511", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-9210387e6b6f8833", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-go-archive-0c66a72217abfab4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-moby-api-ce84eba3654eaadc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-moby-client-fd01e53191ad1d36", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-fe3b88426627c239", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-capability-7c6481407411f8a5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-devices-0bba930954dfcd6c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-b22b4ef8adaed18a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-acb66c2b7614606b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-user-a15a283dcb24b8c6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-userns-932829a91f1b5bd1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-term-9f3261e1d3e7fb1f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-e57e4670efd62048", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-c831ec94f75811d3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-cgroups-ec5ecc501ede6e55", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-7e91e372745aed58", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-018c25d0ade7e2c3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-runc-cbba0bf37528e6c2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-a56c4f15b894bac0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-tools-dc4457a5eefde152", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-selinux-48507f97bdaa1c57", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-openshift-imagebuilder-a6c745ca54da8046", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-errors-9a1788200a951e1e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-sftp-a235888e464efa60", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-4a24748621c4e873", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pmezard-go-difflib-387720a75b8598d1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-proglottis-gpgme-1b49a4f27b657544", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-seccomp-libseccomp-golang-2016e4e0d7586413", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-d6b0fdf738acfb72", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sigstore-fulcio-055469e0a812dc47", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sigstore-protobuf-specs-380957910dde1b24", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-3cf9b8a5cb414ee7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-01d68c0aa81719f1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-smallstep-pkcs7-e1feedc200050271", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-cobra-eef9fcfc6bd61b8a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-pflag-3ca165c40a362bf0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-stefanberger-go-pkcs11uri-aba4c2304f554dbb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-b6727d40732fcfdb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tchap-go-patricia-v2-b5cd62a95c06a53a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-d8327e3c1ea4b3aa", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-eb963611a7a72b34", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vbatts-tar-split-7f14f580c48489cb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vbauerster-cupwriter-1989f476230e1144", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vbauerster-mpb-v8-1dfe16a4313124e5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vishvananda-netlink-ae2f00a5e23588cb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vishvananda-netns-38e469665e6c90ed", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-youmark-pkcs8-f938c1f9a8cf24cd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-go.etcd.io-bbolt-e99c005027529491", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-cd344c9f36efaa74", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-85b5eb3c1e96c95a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-712326ff377490d4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-43d35aa1eaa7761e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-18a675eeb9f4e629", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-a42d985c9504d242", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-common-b73d64e1e1f026ad", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-image-v5-267b15fe286d196b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-storage-0a99f258bf2a5922", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-go.yaml.in-yaml-v2-15f6e682125c405a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-08e3631689ba2666", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-crypto-5bf6c8bb05ac89b7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-mod-c049e0e8da24e549", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-net-ce982cc286d48283", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sync-87530f6059cddcf0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sys-5bf29773c312e0ad", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-term-a852b1b5097c9583", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-text-0b33f09b0f5b838a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-f84998d4af573262", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-53a054d1ec59624e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-grpc-b9defaad287b6e42", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-protobuf-a21881fc809e6f28", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-95e4a149ea37b0f8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-sigs.k8s.io-yaml-e77a905e15771fbf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-stdlib-a98a10207e4c5334", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-8d9f3a471e783be0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-specs-go-c5150a5acd89f695", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-s390x-buildah", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.s390x"}, {"spdxElementId": "SPDXRef-Package-rpm-buildah-39d5109f7ce261ed", "relatedSpdxElement": "SPDXRef-File-...buildah-1.45.1-1.1.hum1.s390x.debug-417f03b0f74ab4f4", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-debuginfo-1.45.1-1.1.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-rpm-buildah-39d5109f7ce261ed", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-buildah-debuginfo-1.45.1-1.1.hum1.s390x", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-s390x-buildah-debuginfo", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-buildah-debuginfo-1.45.1-1.1.hum1.s390x"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-buildah-debugsource-1.45.1-1.1.hum1.s390x", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-s390x-buildah-debugsource", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-buildah-debugsource-1.45.1-1.1.hum1.s390x"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-connections-0359b2c77104e8a1", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-specs-go-038d9813ffa3b347", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-067ff806a0e5098a", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-06d7aa9861df8abc", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-06dd29112cd4624a", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-smallstep-pkcs7-0e28f0c0ef318b53", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsouza-go-dockerclient-0e2b9edcedb280a5", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-0f71d421e6bba326", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-119553fe385fb1d7", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-term-13944c83c63f8a91", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mistifyio-go-zfs-v4-15f757a30642dd8f", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-1badf9e25c0d75d3", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-log-1cbf87db618d69ff", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-devices-1e07e3c4c9b3a9a2", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-youmark-pkcs8-1e266857d1fd3a9b", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-sigs.k8s.io-yaml-22a4b1fc5e8ff8d1", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-capability-238db1746bb8e977", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-manifoldco-promptui-248ade55d631a964", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-errors-24cfbc491cc7e0fc", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jinzhu-copier-2518d24a94eba6c5", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-256156fe2dd60918", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-proglottis-gpgme-27453a243a43f5b2", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-2937097fe5a85a06", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-sftp-29e57ea1c99898b2", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-2c3b05c24801e5d0", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbatts-tar-split-2ddbd944c45e4309", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-protobuf-specs-2e1dccb05431fbfa", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbauerster-cupwriter-2fb635995646eff2", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vishvananda-netlink-3161a3b376608075", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-platforms-31d2894929a71346", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v2-374827ae56943fe4", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-37fdbf9f74f14638", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-38a588fac2174035", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-3dc3d9ab050339f3", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-3f753f271166cf43", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-buildkit-4031161622401abb", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containers-luksy-44c015a2bf099020", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-4677d236992205a1", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-47374a15fc19abe8", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-49f4bb0d86b8560c", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-4bd4ed9fbdf075be", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.podman.io-storage-4cb5260b083892ac", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.podman.io-common-4e23712deaa64e2f", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-distribution-reference-4eb6661d5ad12786", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-4f74dccddc4ae2f1", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-508a4babd6e890ae", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-stargz-snapshotter-estargz-51376b5b87eff751", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-51907abec07cecb7", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbauerster-mpb-v8-51a6248664097e67", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-cgroups-553273446a892597", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kr-fs-55e2f027d27e8046", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-user-56f2812e558d7884", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-disiqueira-gotree-v3-5811d37610b3bac4", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-5866c3604c88fd1d", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-5b12152ce1dd35bd", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pmezard-go-difflib-5f5dc6c09d1e2633", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-stefanberger-go-pkcs11uri-60016603187fd13d", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-61e557373116f66a", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-62ad02d9b04f652a", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-6328c8f49fb08380", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-6351fc8fb2e647d9", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-json-iterator-go-6404cb6554d1e194", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-66177ede863ea72a", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-6bf44d498b26678d", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-api-6cb09d29b304e422", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-dario.cat-mergo-6fbc303f1b544d9d", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-distribution-717995af41ce103a", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-75175fa77c9d9e02", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-units-77948dbadfac58b3", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-7a043d1e327c1af6", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containers-libtrust-7cdbbcb708e500d0", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-7e4767630bac35c1", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-client-80691b3ba68f6e04", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-813d9909f7aa5876", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-8259cc38a5cbd831", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-8350de601ae9bc18", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-userns-839bd1ed1746f977", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-85ed2b122b07fea8", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-sqlite3-8768f5bf845d9516", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-8cb96421b7d441e0", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-93466cb86eff145c", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-chzyer-readline-934aa75f248e0869", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-937d7e46091b51fd", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-godbus-dbus-v5-9488363765660ed9", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tchap-go-patricia-v2-95336329dd558fa4", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-intervals-96c2f7b75d366775", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-96f91443a039e95e", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-miekg-pkcs11-972259110bd726b4", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-VividCortex-ewma-9a07e953c3a0ea87", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gorilla-mux-9d6ac413ee3f1c2b", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-9ef6c56dac778aae", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vishvananda-netns-a0940c2defb854ef", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-a5ef70b02849297e", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-a77bd8987c5f84a5", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-a7bae91b3797e03b", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-fulcio-a8a5c9731df7cec5", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-stdlib-a98a10207e4c5334", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-term-a9b451e6148e9e9d", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-go-archive-ab308eee621e5002", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-ad74de95dbfeaeab", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-tools-adeb50779fe31f18", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-b3fcb50611c1a1b0", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-selinux-b59e915c266274b5", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-davecgh-go-spew-b6ef6271628c93d9", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cloudflare-circl-b70d31027f28f5bd", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-v22-b79826eea044c3de", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-c113541583efad4d", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-c4511dc772f2c7ae", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-c518e06a3692561d", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-mod-c5cbcb5d29a8e1db", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-compress-cbaeb8989eb727f1", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-d34410eb11c4820b", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containers-ocicrypt-dba9125aad323008", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.etcd.io-bbolt-dbee62f6de8e6b9f", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-e2cb2c4850f48e72", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-e6d1493614193f44", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-e8c1a17a3e50ac0d", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-eae9dba9937b7227", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-openshift-imagebuilder-eb55a89a085ded30", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-eccc590e81a9439d", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-eddba441de8a22ff", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runc-eed7e275197232fc", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-f42cb4f983076081", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.podman.io-image-v5-f58f559296826499", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-f698bea4459b85e0", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cyberphone-json-canonicalization-fd21c516597b5b70", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-seccomp-libseccomp-golang-fe3ba33df5617f8d", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aead-serpent-fe7bb2575011fa0b", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-connections-0359b2c77104e8a1", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-specs-go-038d9813ffa3b347", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-067ff806a0e5098a", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-06d7aa9861df8abc", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-06dd29112cd4624a", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-smallstep-pkcs7-0e28f0c0ef318b53", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsouza-go-dockerclient-0e2b9edcedb280a5", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-0f71d421e6bba326", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-119553fe385fb1d7", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-term-13944c83c63f8a91", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mistifyio-go-zfs-v4-15f757a30642dd8f", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-1badf9e25c0d75d3", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-log-1cbf87db618d69ff", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-devices-1e07e3c4c9b3a9a2", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-youmark-pkcs8-1e266857d1fd3a9b", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-sigs.k8s.io-yaml-22a4b1fc5e8ff8d1", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-capability-238db1746bb8e977", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-manifoldco-promptui-248ade55d631a964", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-errors-24cfbc491cc7e0fc", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jinzhu-copier-2518d24a94eba6c5", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-256156fe2dd60918", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-rpm-buildah-261a09bf05bdb40c", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-proglottis-gpgme-27453a243a43f5b2", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-2937097fe5a85a06", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-sftp-29e57ea1c99898b2", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-2c3b05c24801e5d0", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbatts-tar-split-2ddbd944c45e4309", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-protobuf-specs-2e1dccb05431fbfa", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbauerster-cupwriter-2fb635995646eff2", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vishvananda-netlink-3161a3b376608075", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-platforms-31d2894929a71346", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v2-374827ae56943fe4", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-37fdbf9f74f14638", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-38a588fac2174035", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-3dc3d9ab050339f3", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-3f753f271166cf43", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-buildkit-4031161622401abb", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containers-luksy-44c015a2bf099020", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-4677d236992205a1", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-47374a15fc19abe8", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-49f4bb0d86b8560c", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-4bd4ed9fbdf075be", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.podman.io-storage-4cb5260b083892ac", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.podman.io-common-4e23712deaa64e2f", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-distribution-reference-4eb6661d5ad12786", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-4f74dccddc4ae2f1", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-508a4babd6e890ae", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-stargz-snapshotter-estargz-51376b5b87eff751", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-51907abec07cecb7", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbauerster-mpb-v8-51a6248664097e67", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-cgroups-553273446a892597", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kr-fs-55e2f027d27e8046", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-user-56f2812e558d7884", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-disiqueira-gotree-v3-5811d37610b3bac4", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-5866c3604c88fd1d", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-5b12152ce1dd35bd", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pmezard-go-difflib-5f5dc6c09d1e2633", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-stefanberger-go-pkcs11uri-60016603187fd13d", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-61e557373116f66a", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-62ad02d9b04f652a", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-6328c8f49fb08380", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-6351fc8fb2e647d9", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-json-iterator-go-6404cb6554d1e194", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-66177ede863ea72a", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-6bf44d498b26678d", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-api-6cb09d29b304e422", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-dario.cat-mergo-6fbc303f1b544d9d", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-distribution-717995af41ce103a", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-75175fa77c9d9e02", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-units-77948dbadfac58b3", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-7a043d1e327c1af6", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containers-libtrust-7cdbbcb708e500d0", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-7e4767630bac35c1", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-client-80691b3ba68f6e04", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-813d9909f7aa5876", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-8259cc38a5cbd831", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-8350de601ae9bc18", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-userns-839bd1ed1746f977", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-85ed2b122b07fea8", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-sqlite3-8768f5bf845d9516", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-8cb96421b7d441e0", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-93466cb86eff145c", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-chzyer-readline-934aa75f248e0869", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-937d7e46091b51fd", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-godbus-dbus-v5-9488363765660ed9", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tchap-go-patricia-v2-95336329dd558fa4", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-intervals-96c2f7b75d366775", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-96f91443a039e95e", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-miekg-pkcs11-972259110bd726b4", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-VividCortex-ewma-9a07e953c3a0ea87", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gorilla-mux-9d6ac413ee3f1c2b", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-9ef6c56dac778aae", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vishvananda-netns-a0940c2defb854ef", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-a5ef70b02849297e", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-a77bd8987c5f84a5", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-a7bae91b3797e03b", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-fulcio-a8a5c9731df7cec5", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-stdlib-a98a10207e4c5334", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-term-a9b451e6148e9e9d", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-go-archive-ab308eee621e5002", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-ad74de95dbfeaeab", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-tools-adeb50779fe31f18", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-b3fcb50611c1a1b0", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-selinux-b59e915c266274b5", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-davecgh-go-spew-b6ef6271628c93d9", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cloudflare-circl-b70d31027f28f5bd", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-v22-b79826eea044c3de", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-c113541583efad4d", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-c4511dc772f2c7ae", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-c518e06a3692561d", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-mod-c5cbcb5d29a8e1db", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-compress-cbaeb8989eb727f1", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-d34410eb11c4820b", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containers-ocicrypt-dba9125aad323008", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.etcd.io-bbolt-dbee62f6de8e6b9f", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-e2cb2c4850f48e72", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-e6d1493614193f44", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-e8c1a17a3e50ac0d", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-eae9dba9937b7227", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-openshift-imagebuilder-eb55a89a085ded30", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-eccc590e81a9439d", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-eddba441de8a22ff", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runc-eed7e275197232fc", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-f42cb4f983076081", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.podman.io-image-v5-f58f559296826499", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-f698bea4459b85e0", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cyberphone-json-canonicalization-fd21c516597b5b70", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-seccomp-libseccomp-golang-fe3ba33df5617f8d", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aead-serpent-fe7bb2575011fa0b", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-rpm-buildah-261a09bf05bdb40c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-dario.cat-mergo-6fbc303f1b544d9d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-119553fe385fb1d7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-5b12152ce1dd35bd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-VividCortex-ewma-9a07e953c3a0ea87", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-6351fc8fb2e647d9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aead-serpent-fe7bb2575011fa0b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-3f753f271166cf43", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-chzyer-readline-934aa75f248e0869", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-0f71d421e6bba326", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cloudflare-circl-b70d31027f28f5bd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-errdefs-a77bd8987c5f84a5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-06dd29112cd4624a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-log-1cbf87db618d69ff", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-platforms-31d2894929a71346", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-stargz-snapshotter-estargz-51376b5b87eff751", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-38a588fac2174035", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containers-libtrust-7cdbbcb708e500d0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containers-luksy-44c015a2bf099020", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containers-ocicrypt-dba9125aad323008", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-v22-b79826eea044c3de", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cyberphone-json-canonicalization-fd21c516597b5b70", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-b3fcb50611c1a1b0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-davecgh-go-spew-b6ef6271628c93d9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-disiqueira-gotree-v3-5811d37610b3bac4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-distribution-reference-4eb6661d5ad12786", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-distribution-717995af41ce103a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-ad74de95dbfeaeab", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-go-connections-0359b2c77104e8a1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-go-units-77948dbadfac58b3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-eccc590e81a9439d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-e2cb2c4850f48e72", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fsouza-go-dockerclient-0e2b9edcedb280a5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-85ed2b122b07fea8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-logr-508a4babd6e890ae", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-stdr-6328c8f49fb08380", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-godbus-dbus-v5-9488363765660ed9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-4f74dccddc4ae2f1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-intervals-96c2f7b75d366775", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-uuid-a7bae91b3797e03b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gorilla-mux-9d6ac413ee3f1c2b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-4bd4ed9fbdf075be", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-eae9dba9937b7227", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jinzhu-copier-2518d24a94eba6c5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-json-iterator-go-6404cb6554d1e194", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-klauspost-compress-cbaeb8989eb727f1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-3dc3d9ab050339f3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-kr-fs-55e2f027d27e8046", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-manifoldco-promptui-248ade55d631a964", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-8259cc38a5cbd831", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-9ef6c56dac778aae", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-sqlite3-8768f5bf845d9516", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-miekg-pkcs11-972259110bd726b4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mistifyio-go-zfs-v4-15f757a30642dd8f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-buildkit-4031161622401abb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-7e4767630bac35c1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-go-archive-ab308eee621e5002", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-moby-api-6cb09d29b304e422", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-moby-client-80691b3ba68f6e04", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-d34410eb11c4820b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-capability-238db1746bb8e977", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-devices-1e07e3c4c9b3a9a2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-8cb96421b7d441e0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-6bf44d498b26678d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-user-56f2812e558d7884", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-userns-839bd1ed1746f977", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-term-a9b451e6148e9e9d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-61e557373116f66a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-f42cb4f983076081", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-cgroups-553273446a892597", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-c4511dc772f2c7ae", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-937d7e46091b51fd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-runc-eed7e275197232fc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-067ff806a0e5098a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-tools-adeb50779fe31f18", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-selinux-b59e915c266274b5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-openshift-imagebuilder-eb55a89a085ded30", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-errors-24cfbc491cc7e0fc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-sftp-29e57ea1c99898b2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-c518e06a3692561d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pmezard-go-difflib-5f5dc6c09d1e2633", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-proglottis-gpgme-27453a243a43f5b2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-seccomp-libseccomp-golang-fe3ba33df5617f8d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-e6d1493614193f44", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sigstore-fulcio-a8a5c9731df7cec5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sigstore-protobuf-specs-2e1dccb05431fbfa", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-e8c1a17a3e50ac0d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-51907abec07cecb7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-smallstep-pkcs7-0e28f0c0ef318b53", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-cobra-8350de601ae9bc18", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-pflag-a5ef70b02849297e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-stefanberger-go-pkcs11uri-60016603187fd13d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-5866c3604c88fd1d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tchap-go-patricia-v2-95336329dd558fa4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-f698bea4459b85e0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-813d9909f7aa5876", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vbatts-tar-split-2ddbd944c45e4309", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vbauerster-cupwriter-2fb635995646eff2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vbauerster-mpb-v8-51a6248664097e67", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vishvananda-netlink-3161a3b376608075", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vishvananda-netns-a0940c2defb854ef", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-youmark-pkcs8-1e266857d1fd3a9b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.etcd.io-bbolt-dbee62f6de8e6b9f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-2937097fe5a85a06", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-93466cb86eff145c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-7a043d1e327c1af6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-47374a15fc19abe8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-eddba441de8a22ff", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-6ee203651dbe6f63", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-common-4e23712deaa64e2f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-image-v5-f58f559296826499", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-storage-4cb5260b083892ac", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.yaml.in-yaml-v2-374827ae56943fe4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-37fdbf9f74f14638", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-crypto-c113541583efad4d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-mod-c5cbcb5d29a8e1db", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-net-4677d236992205a1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sync-66177ede863ea72a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sys-1badf9e25c0d75d3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-term-13944c83c63f8a91", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-text-06d7aa9861df8abc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-256156fe2dd60918", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-2c3b05c24801e5d0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-grpc-49f4bb0d86b8560c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-protobuf-75175fa77c9d9e02", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-62ad02d9b04f652a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-sigs.k8s.io-yaml-22a4b1fc5e8ff8d1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-stdlib-a98a10207e4c5334", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-96f91443a039e95e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-specs-go-038d9813ffa3b347", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-x86-64-buildah", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-buildah-1.45.1-1.1.hum1.x86-64"}, {"spdxElementId": "SPDXRef-Package-rpm-buildah-a5f22dc466ec54df", "relatedSpdxElement": "SPDXRef-File-...buildah-1.45.1-1.1.hum1.x86-64.debug-2bb110e59a8d4130", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-debuginfo-1.45.1-1.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-rpm-buildah-a5f22dc466ec54df", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-buildah-debuginfo-1.45.1-1.1.hum1.x86-64", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-x86-64-buildah-debuginfo", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-buildah-debuginfo-1.45.1-1.1.hum1.x86-64"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-buildah-debugsource-1.45.1-1.1.hum1.x86-64", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-x86-64-buildah-debugsource", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-buildah-debugsource-1.45.1-1.1.hum1.x86-64"}], "documentDescribes": ["SPDXRef-SRPM", "SPDXRef-aarch64-buildah", "SPDXRef-s390x-buildah", "SPDXRef-x86-64-buildah", "SPDXRef-aarch64-buildah-debuginfo", "SPDXRef-s390x-buildah-debuginfo", "SPDXRef-x86-64-buildah-debuginfo", "SPDXRef-aarch64-buildah-debugsource", "SPDXRef-s390x-buildah-debugsource", "SPDXRef-x86-64-buildah-debugsource"]}