{"spdxVersion": "SPDX-2.3", "dataLicense": "CC0-1.0", "SPDXID": "SPDXRef-DOCUMENT", "creationInfo": {"created": "2026-10-08T23:09:34Z", "creators": ["Tool: Konflux", "Organization: Fedora"]}, "name": "dex-2.46.0-0.1.hum1", "documentNamespace": "https://fedoraproject.org/dex-2.46.0-0.1.hum1.spdx.json", "packages": [{"SPDXID": "SPDXRef-SRPM", "name": "dex", "versionInfo": "2.46.0-0.1.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "dex-2.46.0-0.1.hum1.src.rpm", "licenseDeclared": "Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0 AND Unicode-DFS-2016", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/dex@2.46.0-0.1.hum1?arch=src"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "0968450975c01295c4daa6f0c4fac5687dcd8af4c61cd2bb707345ba07b9e703"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: b'\\x92\\xd1\\xaf\\x84P\\xe3*G\\x00@\\xcb\\xe0C\\x9e\\xae`'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sha256header: a9d361da71dba7efeb0a5676bf5e6ac88fd8190630518c2b99bdaf9c4c610829"}]}, {"SPDXID": "SPDXRef-aarch64-dex", "name": "dex", "versionInfo": "2.46.0-0.1.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "dex-2.46.0-0.1.hum1.aarch64.rpm", "licenseDeclared": "Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0 AND Unicode-DFS-2016", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/dex@2.46.0-0.1.hum1?arch=aarch64"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "6d3b834ada38a70047df007219c58abcd37e20958e47f9bd17bcda71c475b4b9"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: b'<\\xc3\\x83\\x9d)\\xbe=\\x0fE\\x10\\xa6\\xa3b\\xea\\xef\\xce'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sha256header: d638b421142c334fe1587b6f0d260b06dd1e843baf176d627c0b0f02b6c191f9"}]}, {"SPDXID": "SPDXRef-x86-64-dex", "name": "dex", "versionInfo": "2.46.0-0.1.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "dex-2.46.0-0.1.hum1.x86_64.rpm", "licenseDeclared": "Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0 AND Unicode-DFS-2016", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/dex@2.46.0-0.1.hum1?arch=x86_64"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "e6067e164c3159a281db31cd0658243a6ff59a01624d5f08477fae2c630214e0"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: b'*\\x17\\xe2\\x19\\x1d\\xc5-*\\xb3\\x9a[\\xbe\\x04\\xf3\\xf4\\x9e'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sha256header: ef1dda2624dc63fa2cf6d362ce7d9b1101d95ae0132d5b0dd77d06332ec9f655"}]}, {"SPDXID": "SPDXRef-aarch64-dex-debuginfo", "name": "dex-debuginfo", "versionInfo": "2.46.0-0.1.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "dex-debuginfo-2.46.0-0.1.hum1.aarch64.rpm", "licenseDeclared": "Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0 AND Unicode-DFS-2016", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/dex-debuginfo@2.46.0-0.1.hum1?arch=aarch64"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "a9116eb46f610afc6e6a26679745be56fbffe4b7862156cf192a3676e13e87df"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: b\"\\xd1\\xac'\\xdf\\x1a\\xdc\\x0ej\\xd7p\\x1a\\x8a>e\\xb3\\xb4\""}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sha256header: adf6562d761256ca4057198605671fb0e0f597feb2009386b8b49e051a83f495"}]}, {"SPDXID": "SPDXRef-x86-64-dex-debuginfo", "name": "dex-debuginfo", "versionInfo": "2.46.0-0.1.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "dex-debuginfo-2.46.0-0.1.hum1.x86_64.rpm", "licenseDeclared": "Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0 AND Unicode-DFS-2016", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/dex-debuginfo@2.46.0-0.1.hum1?arch=x86_64"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "f470c9f60ee76c491f7f7e8b4d7301ebcfbf94b89e0a79039e5de49eaa6055cc"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: b'\\x00g\\x9e\\xd3vL\\x1a;\\xb3\\xca\\xaeq\\x88\\xc2F\\xa8'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sha256header: d989ba98f08d6209661eef493eef253cff20f226f2bf556791926a233104c6c1"}]}, {"SPDXID": "SPDXRef-aarch64-dex-debugsource", "name": "dex-debugsource", "versionInfo": "2.46.0-0.1.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "dex-debugsource-2.46.0-0.1.hum1.aarch64.rpm", "licenseDeclared": "Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0 AND Unicode-DFS-2016", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/dex-debugsource@2.46.0-0.1.hum1?arch=aarch64"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "ce430df419c76ef3230a9be336ee231e2d846557e4edf53e911b9d37882fc859"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: b'\\x87\\x8b\\n&\\xa5\\xee Zl\\x7f\\xeeM\\xd1L;y'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sha256header: 9ec61ab5f896a9543eb0aab2ea3ab9fb0a0946172fd504649eeb3e8545bf06d9"}]}, {"SPDXID": "SPDXRef-x86-64-dex-debugsource", "name": "dex-debugsource", "versionInfo": "2.46.0-0.1.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "dex-debugsource-2.46.0-0.1.hum1.x86_64.rpm", "licenseDeclared": "Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0 AND Unicode-DFS-2016", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/dex-debugsource@2.46.0-0.1.hum1?arch=x86_64"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "4dcd47f38b22efc8b7cd475b2b65735da3ac36b6c22e62f9ad5893b6192c972f"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: b'\\x92\\x8bB\\xe1{\\xaa\\x98\\xeag\\xf28n\\x8fo\\xe7\\x85'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sha256header: dba0c286e54b7228088f8b381e43f46ac76a6aae7ff4c5647b9c519bc8bf0d65"}]}, {"SPDXID": "SPDXRef-Source0", "name": "dex", "versionInfo": "2.46.0", "packageFileName": "dex-2.46.0.tar.gz", "downloadLocation": "https://src.fedoraproject.org/repo/pkgs/rpms/dex/dex-2.46.0.tar.gz/sha512/7ebceead7654754ce04ff29201c511f71e448578bd1fada34bff7ee29f0f6def1dbe0ef14d4f14b6febba8120162508f1f15046d734508c10111c03667c17a0e/dex-2.46.0.tar.gz", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "9a3ac2db51c97e451515c39cad1dd51640ce9b8d753d11b0a4ccacb3f2c5fa2d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/dex@2.46.0?download_url=https://src.fedoraproject.org/repo/pkgs/rpms/dex/dex-2.46.0.tar.gz/sha512/7ebceead7654754ce04ff29201c511f71e448578bd1fada34bff7ee29f0f6def1dbe0ef14d4f14b6febba8120162508f1f15046d734508c10111c03667c17a0e/dex-2.46.0.tar.gz&checksum=sha512:7ebceead7654754ce04ff29201c511f71e448578bd1fada34bff7ee29f0f6def1dbe0ef14d4f14b6febba8120162508f1f15046d734508c10111c03667c17a0e"}]}, {"SPDXID": "SPDXRef-Source0-origin", "name": "dex", "versionInfo": "2.46.0", "downloadLocation": "https://github.com/dexidp/dex/archive/v2.46.0/dex-2.46.0.tar.gz", "packageFileName": "dex-2.46.0.tar.gz", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "9a3ac2db51c97e451515c39cad1dd51640ce9b8d753d11b0a4ccacb3f2c5fa2d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/dex@2.46.0?download_url=https://github.com/dexidp/dex/archive/v2.46.0/dex-2.46.0.tar.gz&checksum=sha256:9a3ac2db51c97e451515c39cad1dd51640ce9b8d753d11b0a4ccacb3f2c5fa2d"}]}, {"SPDXID": "SPDXRef-Source1", "name": "dex-2.46.0", "versionInfo": "vendor", "packageFileName": "dex-2.46.0-vendor.tar.bz2", "downloadLocation": "https://src.fedoraproject.org/repo/pkgs/rpms/dex/dex-2.46.0-vendor.tar.bz2/sha512/b2b701f62ffa71d5d71758c2e412b7f9040467a7ee04b5491b3f0a581768eebfc88a27aab5e29a318491fae1ccd4a3b4484119b54d2386892ce4e226c1ff5341/dex-2.46.0-vendor.tar.bz2", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "da3f4dcdf80344190ba7e41e38ce9345f34286dc1c970aa31556dae521df6696"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/dex-2.46.0@vendor?download_url=https://src.fedoraproject.org/repo/pkgs/rpms/dex/dex-2.46.0-vendor.tar.bz2/sha512/b2b701f62ffa71d5d71758c2e412b7f9040467a7ee04b5491b3f0a581768eebfc88a27aab5e29a318491fae1ccd4a3b4484119b54d2386892ce4e226c1ff5341/dex-2.46.0-vendor.tar.bz2&checksum=sha512:b2b701f62ffa71d5d71758c2e412b7f9040467a7ee04b5491b3f0a581768eebfc88a27aab5e29a318491fae1ccd4a3b4484119b54d2386892ce4e226c1ff5341"}]}, {"SPDXID": "SPDXRef-Source2", "name": "go-vendor", "versionInfo": "tools.toml", "packageFileName": "go-vendor-tools.toml", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "c12e26544c8a8146b1a20ab990231da5dc310061bd927169458c0716c88a1ae4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/go-vendor@tools.toml"}]}, {"SPDXID": "SPDXRef-Buildroot-dex-aarch64", "name": "dex-buildroot-aarch64", "versionInfo": "da52d037", "downloadLocation": "NOASSERTION", "filesAnalyzed": false}, {"SPDXID": "SPDXRef-Buildroot-Package-R-srpm-macros-aarch64", "name": "R-srpm-macros", "versionInfo": "1.3.7-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/R-srpm-macros-1.3.7-3.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: af95299e83e51b62a40fa7a42d357077"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/R-srpm-macros@1.3.7-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-add-determinism-aarch64", "name": "add-determinism", "versionInfo": "0.7.3-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/a/add-determinism-0.7.3-3.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND MIT AND Unicode-DFS-2016 AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 OR MIT) AND (Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND (MIT OR Zlib OR Apache-2.0) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: d9f312587e782399c5594fca818bdf4a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/add-determinism@0.7.3-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-alternatives-aarch64", "name": "alternatives", "versionInfo": "1.33-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/a/alternatives-1.33-6.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: acd4c0c14bfe18cb245d0a16f0ddaa5a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/alternatives@1.33-6.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-annobin-docs-aarch64", "name": "annobin-docs", "versionInfo": "13.32-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/a/annobin-docs-13.32-1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND GFDL-1.3-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: f7b82d32f1e08c859e3b8de4668a28fc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/annobin-docs@13.32-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-annobin-plugin-gcc-aarch64", "name": "annobin-plugin-gcc", "versionInfo": "13.32-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/a/annobin-plugin-gcc-13.32-1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND GFDL-1.3-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: e2bbb8edbb56b704ce72dd1df99c7943"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/annobin-plugin-gcc@13.32-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ansible-srpm-macros-aarch64", "name": "ansible-srpm-macros", "versionInfo": "1-22.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/a/ansible-srpm-macros-1-22.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 6343ff368e5236625d015dbc91e70769"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ansible-srpm-macros@1-22.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-askalono-cli-aarch64", "name": "askalono-cli", "versionInfo": "0.5.0-4.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/aarch64/os/Packages/a/askalono-cli-0.5.0-4.fc44.aarch64.rpm", "licenseDeclared": "Apache-2.0 AND CC0-1.0 AND MIT AND Unicode-DFS-2016 AND (Apache-2.0 OR BSL-1.0) AND (Apache-2.0 OR MIT) AND (MIT OR Apache-2.0 OR Zlib) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: eae8d6430b2e5c31170f3b2d7f1f51bb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/askalono-cli@0.5.0-4.fc44?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-audit-libs-aarch64", "name": "audit-libs", "versionInfo": "4.2.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/a/audit-libs-4.2.1-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 6fac467d347d162d8ce3b35b75206dc5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/audit-libs@4.2.1-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bash-aarch64", "name": "bash", "versionInfo": "5.3.15-2.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/b/bash-5.3.15-2.2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 1eef6290f42b521b0847af4a5f4ca61b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bash@5.3.15-2.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-binutils-aarch64", "name": "binutils", "versionInfo": "2.46.1-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/b/binutils-2.46.1-1.2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-3.0-or-later WITH Bison-exception-2.2) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND BSD-3-Clause AND GFDL-1.3-or-later AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 9d650b254a6b2aafc48494b30fd47b7c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/binutils@2.46.1-1.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-build-reproducibility-srpm-macros-aarch64", "name": "build-reproducibility-srpm-macros", "versionInfo": "0.7.3-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/b/build-reproducibility-srpm-macros-0.7.3-3.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: b7d13395d88324c0009658f89c21ec4d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/build-reproducibility-srpm-macros@0.7.3-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bzip2-libs-aarch64", "name": "bzip2-libs", "versionInfo": "1.0.8-24.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/b/bzip2-libs-1.0.8-24.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-4-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 7fe1a1592b12936460dc276a532df8e7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bzip2-libs@1.0.8-24.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bzip2-aarch64", "name": "bzip2", "versionInfo": "1.0.8-24.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/b/bzip2-1.0.8-24.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-4-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 83f0af4d4c241cc82118a298f501cb03"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bzip2@1.0.8-24.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ca-certificates-aarch64", "name": "ca-certificates", "versionInfo": "2026.2.90_v9.0.317-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/ca-certificates-2026.2.90_v9.0.317-1.1.hum1.noarch.rpm", "licenseDeclared": "MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: a195cd97c3daf258791a89c2b5af39d2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ca-certificates@2026.2.90_v9.0.317-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cmake-srpm-macros-aarch64", "name": "cmake-srpm-macros", "versionInfo": "4.3.0-5.5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/cmake-srpm-macros-4.3.0-5.5.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND MIT-open-group AND Zlib AND Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 6d134201d58dbfdf148c024e8e47a576"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cmake-srpm-macros@4.3.0-5.5.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-coreutils-common-aarch64", "name": "coreutils-common", "versionInfo": "9.12-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/coreutils-common-9.12-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-no-invariants-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 00432e73aa7e8f8d82bb41466441d4ed"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/coreutils-common@9.12-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-coreutils-aarch64", "name": "coreutils", "versionInfo": "9.12-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/coreutils-9.12-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-no-invariants-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: b7d057d25d185ea30f52ed55c681988a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/coreutils@9.12-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cpio-aarch64", "name": "cpio", "versionInfo": "2.15-10.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/cpio-2.15-10.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 07b3f2016a23bdb65e5d7569d8eb6579"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cpio@2.15-10.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cpp-aarch64", "name": "cpp", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/cpp-16.2.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: a611ee4e61820fcf829400383ee9409c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cpp@16.2.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-crypto-policies-config-default-aarch64", "name": "crypto-policies-config-default", "versionInfo": "20260812-1.git359ab16.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/crypto-policies-config-default-20260812-1.git359ab16.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 1e6fce169a2973e4f665428cb52ae9ad"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/crypto-policies-config-default@20260812-1.git359ab16.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-crypto-policies-aarch64", "name": "crypto-policies", "versionInfo": "20260812-1.git359ab16.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/crypto-policies-20260812-1.git359ab16.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 9756d9b800cfeafa3f39e494328a620e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/crypto-policies@20260812-1.git359ab16.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-curl-aarch64", "name": "curl", "versionInfo": "8.22.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/curl-8.22.0-1.1.hum1.aarch64.rpm", "licenseDeclared": "curl", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 7b537dee74129daa42cb345356cb49ea"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/curl@8.22.0-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cyrus-sasl-lib-aarch64", "name": "cyrus-sasl-lib", "versionInfo": "2.1.28-37.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/cyrus-sasl-lib-2.1.28-37.2.hum1.aarch64.rpm", "licenseDeclared": "BSD-Attribution-HPND-disclaimer", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 3008fe0f694661a96ab85a997c2588aa"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cyrus-sasl-lib@2.1.28-37.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-debugedit-aarch64", "name": "debugedit", "versionInfo": "5.3-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/d/debugedit-5.3-3.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 40b46b2f221c89c645674502b8647f5c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/debugedit@5.3-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-diffutils-aarch64", "name": "diffutils", "versionInfo": "3.12-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/d/diffutils-3.12-6.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 3e8092a3846ac4f1445fd7f52255b426"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/diffutils@3.12-6.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-dwz-aarch64", "name": "dwz", "versionInfo": "0.17-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/d/dwz-0.17-3.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND GPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 445c73aa30d8146e1f426e64f5354e1e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/dwz@0.17-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ed-aarch64", "name": "ed", "versionInfo": "1.22.6-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/ed-1.22.6-1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-only AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 443b9d1a7a55635cb2f68e241fc9bada"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ed@1.22.6-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-efi-srpm-macros-aarch64", "name": "efi-srpm-macros", "versionInfo": "6-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/efi-srpm-macros-6-9.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: cba49c2554beb37df9cc6bb744737e2b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/efi-srpm-macros@6-9.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-debuginfod-client-aarch64", "name": "elfutils-debuginfod-client", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/elfutils-debuginfod-client-0.196-1.1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-2.0-or-later OR LGPL-3.0-or-later)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: d8d203fd99c873559a67e6443ff174f2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-debuginfod-client@0.196-1.1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-libelf-aarch64", "name": "elfutils-libelf", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/elfutils-libelf-0.196-1.1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 33f3b0f1b90d80a0dadbd7cc447c364c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-libelf@0.196-1.1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-libs-aarch64", "name": "elfutils-libs", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/elfutils-libs-0.196-1.1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 0595a64126ec97eb4d56b5cd73a38777"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-libs@0.196-1.1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-aarch64", "name": "elfutils", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/elfutils-0.196-1.1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-2.0-or-later OR LGPL-3.0-or-later) AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 0d70f8163d0190e72edab57ffae31ffe"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils@0.196-1.1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-erlang-srpm-macros-aarch64", "name": "erlang-srpm-macros", "versionInfo": "0.3.11-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/erlang-srpm-macros-0.3.11-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 063020bc2b254fec865c06f313930cec"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/erlang-srpm-macros@0.3.11-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-expat-aarch64", "name": "expat", "versionInfo": "2.8.5-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/expat-2.8.5-1.2.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 6ff138c1441fc1b5f133acb582b3e364"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/expat@2.8.5-1.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-file-libs-aarch64", "name": "file-libs", "versionInfo": "5.48-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/file-libs-5.48-3.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause-Darwin AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: a540b886506755c536a09f999daa1c47"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/file-libs@5.48-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-filesystem-srpm-macros-aarch64", "name": "filesystem-srpm-macros", "versionInfo": "3.18-59.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/filesystem-srpm-macros-3.18-59.1.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: cff1a42588f4eb1a758735b668069a67"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/filesystem-srpm-macros@3.18-59.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-filesystem-aarch64", "name": "filesystem", "versionInfo": "3.18-59.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/filesystem-3.18-59.1.hum1.aarch64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 67a1cc536f9cab735cb846baefddb7ea"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/filesystem@3.18-59.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-file-aarch64", "name": "file", "versionInfo": "5.48-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/file-5.48-3.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause-Darwin AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 9f3d10d98787fff380b03a8f3e77102a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/file@5.48-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-findutils-aarch64", "name": "findutils", "versionInfo": "1:4.11.0-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/findutils-4.11.0-2.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: f6ec1178a2de3f3dd2e67aab0bfa51f7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/findutils@4.11.0-2.1.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-fonts-srpm-macros-aarch64", "name": "fonts-srpm-macros", "versionInfo": "1:5.0.0-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/fonts-srpm-macros-5.0.0-4.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 72e451571f24737949a256d091508d0c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/fonts-srpm-macros@5.0.0-4.hum1?arch=noarch&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-forge-srpm-macros-aarch64", "name": "forge-srpm-macros", "versionInfo": "0.4.0-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/forge-srpm-macros-0.4.0-5.hum1.noarch.rpm", "licenseDeclared": "GPL-1.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: bfbed65969ec708556df3750591a377d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/forge-srpm-macros@0.4.0-5.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-fpc-srpm-macros-aarch64", "name": "fpc-srpm-macros", "versionInfo": "1.3-17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/fpc-srpm-macros-1.3-17.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 1f7e4cb902ccc37236f8d34ff8873cf2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/fpc-srpm-macros@1.3-17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gap-srpm-macros-aarch64", "name": "gap-srpm-macros", "versionInfo": "2-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gap-srpm-macros-2-3.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 70e3423696085d13791fefc0be7cdf15"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gap-srpm-macros@2-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gawk-aarch64", "name": "gawk", "versionInfo": "5.4.1-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gawk-5.4.1-1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: d586bc40c1d6132f2694072a5718a1f3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gawk@5.4.1-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gcc-plugin-annobin-aarch64", "name": "gcc-plugin-annobin", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gcc-plugin-annobin-16.2.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 856d8e3f146702081b65317a6da18f90"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gcc-plugin-annobin@16.2.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gcc-aarch64", "name": "gcc", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gcc-16.2.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 555fbdebe005a6003d740878539d2db4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gcc@16.2.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gdb-minimal-aarch64", "name": "gdb-minimal", "versionInfo": "17.2-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gdb-minimal-17.2-6.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND BSD-3-Clause AND FSFAP AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain AND GFDL-1.3-or-later AND LGPL-2.0-or-later WITH GCC-exception-2.0 AND GPL-3.0-or-later WITH GCC-exception-3.1 AND GPL-2.0-or-later WITH GNU-compiler-exception AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 8b52c99ad39fb4b6c9bc68140320c43f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gdb-minimal@17.2-6.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gdbm-libs-aarch64", "name": "gdbm-libs", "versionInfo": "1:1.26-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gdbm-libs-1.26-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: f121be53d17f9bbca1ca50a948d12be1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gdbm-libs@1.26-1.1.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ghc-srpm-macros-aarch64", "name": "ghc-srpm-macros", "versionInfo": "1.10-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/ghc-srpm-macros-1.10-2.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: c59363c566e4f370953f5f4b048e594e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ghc-srpm-macros@1.10-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-common-aarch64", "name": "glibc-common", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/glibc-common-2.43-9.2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: f9a198e72a2894ed9ec88a654adf99b1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-common@2.43-9.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-devel-aarch64", "name": "glibc-devel", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/glibc-devel-2.43-9.2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: e42112d33f8547a881c1bb9ffdc1a6e3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-devel@2.43-9.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-gconv-extra-aarch64", "name": "glibc-gconv-extra", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/glibc-gconv-extra-2.43-9.2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: ae1cf12211d528ac9ae11fb34b1bb66b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-gconv-extra@2.43-9.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-minimal-langpack-aarch64", "name": "glibc-minimal-langpack", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/glibc-minimal-langpack-2.43-9.2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 0039d68e01dc9ac5d477a98ecdf2918e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-minimal-langpack@2.43-9.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-aarch64", "name": "glibc", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/glibc-2.43-9.2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: e5a77566fe809a0ac7c2a5a2ec623de6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc@2.43-9.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gmp-aarch64", "name": "gmp", "versionInfo": "1:6.3.0-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gmp-6.3.0-6.1.hum1.aarch64.rpm", "licenseDeclared": "(LGPL-3.0-or-later OR GPL-2.0-or-later OR (LGPL-3.0-or-later AND GPL-2.0-or-later)) AND GFDL-1.3-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 166ae71bf4af463dff3d7c6f5023d699"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gmp@6.3.0-6.1.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnat-srpm-macros-aarch64", "name": "gnat-srpm-macros", "versionInfo": "7-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnat-srpm-macros-7-3.hum1.noarch.rpm", "licenseDeclared": "FSFAP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 66efb6ab04e5e1a84478a688e2f149a3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnat-srpm-macros@7-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnome-srpm-macros-aarch64", "name": "gnome-srpm-macros", "versionInfo": "1.0-1.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/updates/44/Everything/aarch64/Packages/g/gnome-srpm-macros-1.0-1.fc44.noarch.rpm", "licenseDeclared": "Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 2bbaa6afcb861d76b0036e4b5bf9b3be"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnome-srpm-macros@1.0-1.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnulib-l10n-aarch64", "name": "gnulib-l10n", "versionInfo": "20241231-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnulib-l10n-20241231-4.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 5628836ab4d4e824bcadb20d87a01a33"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnulib-l10n@20241231-4.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-dirmngr-aarch64", "name": "gnupg2-dirmngr", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnupg2-dirmngr-2.4.9-18.2.hum1.aarch64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 573b7679ab4b9d60430280a4118102c2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-dirmngr@2.4.9-18.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-gpg-agent-aarch64", "name": "gnupg2-gpg-agent", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnupg2-gpg-agent-2.4.9-18.2.hum1.aarch64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: ade2846c6a8b7bb8e8c3b0c63fb67f7f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-gpg-agent@2.4.9-18.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-gpgconf-aarch64", "name": "gnupg2-gpgconf", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnupg2-gpgconf-2.4.9-18.2.hum1.aarch64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: da48ec10f5d1daccbd975810b0b9c100"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-gpgconf@2.4.9-18.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-keyboxd-aarch64", "name": "gnupg2-keyboxd", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnupg2-keyboxd-2.4.9-18.2.hum1.aarch64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: e12f0d3a0a12adafdb2f9c93d96e60f5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-keyboxd@2.4.9-18.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-verify-aarch64", "name": "gnupg2-verify", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnupg2-verify-2.4.9-18.2.hum1.aarch64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 43419a3185e8322daad33b555b420bb8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-verify@2.4.9-18.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-aarch64", "name": "gnupg2", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnupg2-2.4.9-18.2.hum1.aarch64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: a5c1a31bb640a3b81e5b4c72524d1445"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2@2.4.9-18.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnutls-aarch64", "name": "gnutls", "versionInfo": "3.8.13-5.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnutls-3.8.13-5.2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 191df5a76f2ce6a009e3153d099cbcff"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnutls@3.8.13-5.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-filesystem-aarch64", "name": "go-filesystem", "versionInfo": "3.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/go-filesystem-3.8.0-3.hum1.aarch64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 21c344b50ec791073eecf2f78130e36d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-filesystem@3.8.0-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-rpm-macros-aarch64", "name": "go-rpm-macros", "versionInfo": "3.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/go-rpm-macros-3.8.0-3.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 1cca57be53ff370d84ba6f32712ca1e2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-rpm-macros@3.8.0-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-srpm-macros-aarch64", "name": "go-srpm-macros", "versionInfo": "3.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/go-srpm-macros-3.8.0-3.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 58fd7d8eb056ce7d09e3ba375de1effc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-srpm-macros@3.8.0-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-vendor-tools-aarch64", "name": "go-vendor-tools", "versionInfo": "0.12.0-1.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/updates/44/Everything/aarch64/Packages/g/go-vendor-tools-0.12.0-1.fc44.noarch.rpm", "licenseDeclared": "MIT AND BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 7c4ed6389413dbed713121b1168f24da"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-vendor-tools@0.12.0-1.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-bin-aarch64", "name": "golang1.27-bin", "versionInfo": "1.27.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/golang1.27-bin-1.27.1-2.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: b8dd7c037a6c79a628d6cfdc9117ec7c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27-bin@1.27.1-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-src-aarch64", "name": "golang1.27-src", "versionInfo": "1.27.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/golang1.27-src-1.27.1-2.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 836c68a2d4a36e53e33ae1587ba7e23d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27-src@1.27.1-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-aarch64", "name": "golang1.27", "versionInfo": "1.27.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/golang1.27-1.27.1-2.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 48240e161bd7eddd8e6a3ec1531824b9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27@1.27.1-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golist-aarch64", "name": "golist", "versionInfo": "0.11.0-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/golist-0.11.0-2.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause AND BSD-3-Clause AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: b92a6bbb82038b2e3078acfb1c3f4220"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golist@0.11.0-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gpgverify-aarch64", "name": "gpgverify", "versionInfo": "2.2-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gpgverify-2.2-5.hum1.noarch.rpm", "licenseDeclared": "Boehm-GC", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 9637bdca60814388d4c5b144d923e6d4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gpgverify@2.2-5.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-grep-aarch64", "name": "grep", "versionInfo": "3.12-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/grep-3.12-4.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 3f1164dfa8f8a8505d9e42cd93ae92b5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/grep@3.12-4.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gzip-aarch64", "name": "gzip", "versionInfo": "1.14-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gzip-1.14-4.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 60b31a6471b6943af38248e51ca60f91"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gzip@1.14-4.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-gpg-keys-aarch64", "name": "hummingbird-gpg-keys", "versionInfo": "20251124-1.17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/h/hummingbird-gpg-keys-20251124-1.17.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 01a73721cc0ecdcb5d9f3929f6777157"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-gpg-keys@20251124-1.17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-release-aarch64", "name": "hummingbird-release", "versionInfo": "20251124-1.17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/h/hummingbird-release-20251124-1.17.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: d1c993eba75002797ea72c3cd1266853"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-release@20251124-1.17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-repos-aarch64", "name": "hummingbird-repos", "versionInfo": "20251124-1.17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/h/hummingbird-repos-20251124-1.17.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 1704eb0434ddab68e1c756070246f576"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-repos@20251124-1.17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ima-evm-utils-libs-aarch64", "name": "ima-evm-utils-libs", "versionInfo": "1.6.2-12.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/i/ima-evm-utils-libs-1.6.2-12.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: a96435ab801796679b678799c4768d2e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ima-evm-utils-libs@1.6.2-12.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-info-aarch64", "name": "info", "versionInfo": "7.2-9.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/aarch64/os/Packages/i/info-7.2-9.fc44.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: ff57ae9e674b526c3d40eebc6a75d7f1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/info@7.2-9.fc44?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-jansson-aarch64", "name": "jansson", "versionInfo": "2.14-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/j/jansson-2.14-5.hum1.aarch64.rpm", "licenseDeclared": "MIT AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: db418e1b673911b66cc09a248ffa0c64"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/jansson@2.14-5.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-java-srpm-macros-aarch64", "name": "java-srpm-macros", "versionInfo": "1-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/j/java-srpm-macros-1-9.hum1.noarch.rpm", "licenseDeclared": "MIT-0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 367fafb59cbd6a02034ba8bafdafe9c9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/java-srpm-macros@1-9.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-json-c-aarch64", "name": "json-c", "versionInfo": "0.18-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/j/json-c-0.18-9.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 35d1a4b8eecbbf9528f613f719cf4993"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/json-c@0.18-9.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-kernel-headers-aarch64", "name": "kernel-headers", "versionInfo": "7.2.0-61.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/k/kernel-headers-7.2.0-61.hum1.aarch64.rpm", "licenseDeclared": "((GPL-2.0-only WITH Linux-syscall-note) OR BSD-2-Clause) AND ((GPL-2.0-only WITH Linux-syscall-note) OR BSD-3-Clause) AND ((GPL-2.0-only WITH Linux-syscall-note) OR CDDL-1.0) AND ((GPL-2.0-only WITH Linux-syscall-note) OR Linux-OpenIB) AND ((GPL-2.0-only WITH Linux-syscall-note) OR MIT) AND ((GPL-2.0-or-later WITH Linux-syscall-note) OR BSD-3-Clause) AND ((GPL-2.0-or-later WITH Linux-syscall-note) OR MIT) AND BSD-3-Clause AND (GPL-1.0-or-later WITH Linux-syscall-note) AND GPL-2.0-only AND (GPL-2.0-only WITH Linux-syscall-note) AND (GPL-2.0-or-later WITH Linux-syscall-note) AND (LGPL-2.0-or-later WITH Linux-syscall-note) AND (LGPL-2.1-only WITH Linux-syscall-note) AND (LGPL-2.1-or-later WITH Linux-syscall-note) AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 2d08f0e67b9f8c09d4facbf792b10629"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/kernel-headers@7.2.0-61.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-kernel-srpm-macros-aarch64", "name": "kernel-srpm-macros", "versionInfo": "1.0-30.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/k/kernel-srpm-macros-1.0-30.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: d6fe851b8eed59b0b3ed90411974a3f1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/kernel-srpm-macros@1.0-30.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-keyutils-libs-aarch64", "name": "keyutils-libs", "versionInfo": "1.6.3-8.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/k/keyutils-libs-1.6.3-8.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: d3b7e7b1223be819aef95669d2c4fe0e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/keyutils-libs@1.6.3-8.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-krb5-libs-aarch64", "name": "krb5-libs", "versionInfo": "1.22.2-10.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/k/krb5-libs-1.22.2-10.1.hum1.aarch64.rpm", "licenseDeclared": "Brian-Gladman-2-Clause AND BSD-2-Clause AND (BSD-2-Clause OR GPL-2.0-or-later) AND BSD-2-Clause-first-lines AND BSD-3-Clause AND BSD-4-Clause AND CMU-Mach-nodoc AND FSFULLRWD AND HPND AND HPND-export2-US AND HPND-export-US AND HPND-export-US-acknowledgement AND HPND-export-US-modify AND ISC AND MIT AND MIT-CMU AND OLDAP-2.8 AND OpenVision", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 64b969778b348204645ea47962040173"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/krb5-libs@1.22.2-10.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libacl-aarch64", "name": "libacl", "versionInfo": "2.4.0-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libacl-2.4.0-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 9a7c25684f484750003d22bfc95ac6e6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libacl@2.4.0-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libarchive-aarch64", "name": "libarchive", "versionInfo": "3.8.9-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libarchive-3.8.9-2.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause AND FSFULLR AND GPL-2.0-or-later WITH Libtool-exception AND BSD-3-Clause AND FSFUL", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: c0ad6886a62c6973197b2228b23ec20f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libarchive@3.8.9-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libasan-aarch64", "name": "libasan", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libasan-16.2.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 25182d3ba6ea7a6d2272732b63410bb0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libasan@16.2.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libassuan-aarch64", "name": "libassuan", "versionInfo": "2.5.7-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libassuan-2.5.7-6.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: e4bd09b483f2710e919e8b121b8def5b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libassuan@2.5.7-6.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libatomic-aarch64", "name": "libatomic", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libatomic-16.2.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: b96959aff3608e7749fb10e2d07550a2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libatomic@16.2.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libattr-aarch64", "name": "libattr", "versionInfo": "2.6.0-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libattr-2.6.0-9.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: d1a9e2272f66b2470ddf103dccdbaa58"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libattr@2.6.0-9.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libblkid-aarch64", "name": "libblkid", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libblkid-2.42.4-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 5c7b723d8212d39d56c0d0acb9080c1b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libblkid@2.42.4-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libbrotli-aarch64", "name": "libbrotli", "versionInfo": "1.2.0-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libbrotli-1.2.0-6.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 869ed8881342af797e348cfbd48977db"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libbrotli@1.2.0-6.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcap-ng-aarch64", "name": "libcap-ng", "versionInfo": "0.9.6-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libcap-ng-0.9.6-1.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 9d383300e9cc456fd95f72ae9b417c32"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcap-ng@0.9.6-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcap-aarch64", "name": "libcap", "versionInfo": "2.78-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libcap-2.78-2.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: e99edee512a85f0da32dac44637395a0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcap@2.78-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcbor-aarch64", "name": "libcbor", "versionInfo": "0.14.0-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libcbor-0.14.0-3.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: fa0be1d01e63778fbf1a7b130aecea58"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcbor@0.14.0-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcom-err-aarch64", "name": "libcom_err", "versionInfo": "1.47.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libcom_err-1.47.4-2.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: de7ad9514f9df324f82aa913badb893a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcom_err@1.47.4-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcurl-aarch64", "name": "libcurl", "versionInfo": "8.22.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libcurl-8.22.0-1.1.hum1.aarch64.rpm", "licenseDeclared": "curl", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: e29d913a076a037c83164d4cc34c9448"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcurl@8.22.0-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libeconf-aarch64", "name": "libeconf", "versionInfo": "0.7.9-4.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libeconf-0.7.9-4.2.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 415ebd06ff218a7848731dd8a12df71d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libeconf@0.7.9-4.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libevent-aarch64", "name": "libevent", "versionInfo": "2.1.13-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libevent-2.1.13-1.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND ISC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: e8b87c1794d95583f6cc214eb663e885"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libevent@2.1.13-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfdisk-aarch64", "name": "libfdisk", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libfdisk-2.42.4-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 5fd6813b6601248c9ee9a9b1756e4aa1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfdisk@2.42.4-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libffi-aarch64", "name": "libffi", "versionInfo": "3.8.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libffi-3.8.0-1.1.hum1.aarch64.rpm", "licenseDeclared": "MIT AND CC-PDDC AND (GPL-3.0-or-later WITH Texinfo-exception)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: dc83882a4ffb09b4e5578776aa34fafa"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libffi@3.8.0-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfido2-aarch64", "name": "libfido2", "versionInfo": "1.17.0-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libfido2-1.17.0-6.2.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 40ab484ed83832f7ef24688549227664"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfido2@1.17.0-6.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfsverity-aarch64", "name": "libfsverity", "versionInfo": "1.7-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libfsverity-1.7-4.1.hum1.aarch64.rpm", "licenseDeclared": "NOASSERTION", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 08e4f68c1432f65fac30bcd58c12091e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfsverity@1.7-4.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgcc-aarch64", "name": "libgcc", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libgcc-16.2.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 67a485baa0d3fb4c0e71f3ba1df5f902"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgcc@16.2.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgcrypt-aarch64", "name": "libgcrypt", "versionInfo": "1.12.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libgcrypt-1.12.4-1.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND (BSD-3-Clause OR GPL-2.0-only) AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later AND MIT-Modern-Variant", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: c5c2ac6cdd2c137b49767a001717c89d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgcrypt@1.12.4-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgomp-aarch64", "name": "libgomp", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libgomp-16.2.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 014e8fb82e2268ed7b74f11ce5a8b4eb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgomp@16.2.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgpg-error-aarch64", "name": "libgpg-error", "versionInfo": "1.61-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libgpg-error-1.61-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND (BSD-3-Clause OR LGPL-2.1-or-later) AND FSFULLR AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 204ebeaf74957a27cc2b160a94f0c79e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgpg-error@1.61-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libidn2-aarch64", "name": "libidn2", "versionInfo": "2.3.8-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libidn2-2.3.8-4.1.hum1.aarch64.rpm", "licenseDeclared": "(GPL-2.0-or-later OR LGPL-3.0-or-later) AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 376a3c90f89b82a907277d1af37c65cd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libidn2@2.3.8-4.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libksba-aarch64", "name": "libksba", "versionInfo": "1.8.1-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libksba-1.8.1-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND (LGPL-3.0-or-later OR GPL-2.0-or-later)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: d6a0dcf217b4639e44ee3774153fe5aa"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libksba@1.8.1-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-liblastlog2-aarch64", "name": "liblastlog2", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/liblastlog2-2.42.4-2.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: a7d655451f4570e65aa8f53042f5ecbb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/liblastlog2@2.42.4-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libmount-aarch64", "name": "libmount", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libmount-2.42.4-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 28a418811acfed0034210aa6794e4742"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libmount@2.42.4-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libmpc-aarch64", "name": "libmpc", "versionInfo": "1.4.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libmpc-1.4.1-2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-3.0-or-later AND FSFAP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 7e6fc6a8383754b2471af3a3c1c03e8d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libmpc@1.4.1-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnghttp2-aarch64", "name": "libnghttp2", "versionInfo": "1.69.0-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libnghttp2-1.69.0-6.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: b2b0fab8908bbedc877ac938800f0385"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnghttp2@1.69.0-6.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnghttp3-aarch64", "name": "libnghttp3", "versionInfo": "1.18.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libnghttp3-1.18.0-1.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 731f3357d94b41124af945cecea7639e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnghttp3@1.18.0-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpfm-aarch64", "name": "libpfm", "versionInfo": "4.13.0-20.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/updates/44/Everything/aarch64/Packages/l/libpfm-4.13.0-20.fc44.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: f67c59ebdcc2d13a01308d6b1d6e536c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpfm@4.13.0-20.fc44?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpkgconf-aarch64", "name": "libpkgconf", "versionInfo": "2.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libpkgconf-2.5.1-2.hum1.aarch64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: c03d262f0b15195429879620b129c65f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpkgconf@2.5.1-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpsl-aarch64", "name": "libpsl", "versionInfo": "0.23.3-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libpsl-0.23.3-1.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: cafec3bb2c0a8c9008983d6ae8495d1e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpsl@0.23.3-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libselinux-utils-aarch64", "name": "libselinux-utils", "versionInfo": "3.11-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libselinux-utils-3.11-5.1.hum1.aarch64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: a086b73677bd9517a3b039ac5a432040"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libselinux-utils@3.11-5.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libselinux-aarch64", "name": "libselinux", "versionInfo": "3.11-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libselinux-3.11-5.1.hum1.aarch64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 25520cb28213914e5586621a3e2d314b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libselinux@3.11-5.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsemanage-aarch64", "name": "libsemanage", "versionInfo": "3.11-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libsemanage-3.11-4.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 09bc146f89eb39e1d401f83431ccccea"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsemanage@3.11-4.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsepol-aarch64", "name": "libsepol", "versionInfo": "3.11-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libsepol-3.11-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 2cc6e52cce99fa8840bd0465e75a025c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsepol@3.11-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsmartcols-aarch64", "name": "libsmartcols", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libsmartcols-2.42.4-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 2d04c60be141e0254792ddf85c0e0cc0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsmartcols@2.42.4-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libssh-config-aarch64", "name": "libssh-config", "versionInfo": "0.12.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libssh-config-0.12.2-1.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: f26ba5abb68d2fea08f751a8569faa35"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libssh-config@0.12.2-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libssh-aarch64", "name": "libssh", "versionInfo": "0.12.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libssh-0.12.2-1.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 08f9742c96d29f39defcebf4fd74b197"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libssh@0.12.2-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libstdc++-aarch64", "name": "libstdc++", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libstdc++-16.2.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: e725710c3409d1d4619730547f7449f8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libstdc++@16.2.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtasn1-aarch64", "name": "libtasn1", "versionInfo": "4.21.0-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libtasn1-4.21.0-2.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 14c7c1c97721bac561b7d5f8b5c0c39b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtasn1@4.21.0-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtool-ltdl-aarch64", "name": "libtool-ltdl", "versionInfo": "2.6.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libtool-ltdl-2.6.2-1.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.0-or-later WITH Libtool-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 9809b30f9c49849338a2498623dfb852"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtool-ltdl@2.6.2-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libubsan-aarch64", "name": "libubsan", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libubsan-16.2.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 5a41a411d481c8f52c4f75276408738e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libubsan@16.2.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libunistring-aarch64", "name": "libunistring", "versionInfo": "1.1-12.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libunistring-1.1-12.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: bf45761accca21784ca1db3f147e5757"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libunistring@1.1-12.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libusb1-aarch64", "name": "libusb1", "versionInfo": "1.0.30-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libusb1-1.0.30-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 85c533d18faa83223f25c27c52a93f10"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libusb1@1.0.30-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libuuid-aarch64", "name": "libuuid", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libuuid-2.42.4-2.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: aefcbbc685252be8d35e820024dcce0b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libuuid@2.42.4-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libverto-aarch64", "name": "libverto", "versionInfo": "0.3.2-13.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libverto-0.3.2-13.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 70ecf5a6823c71930b20e277c56238db"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libverto@0.3.2-13.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxcrypt-devel-aarch64", "name": "libxcrypt-devel", "versionInfo": "4.5.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libxcrypt-devel-4.5.2-4.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND BSD-3-Clause AND BSD-2-Clause AND BSD-2-Clause-FreeBSD AND 0BSD AND CC0-1.0 AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 59b03056a000c26fb4c849049d75b60f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxcrypt-devel@4.5.2-4.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxcrypt-aarch64", "name": "libxcrypt", "versionInfo": "4.5.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libxcrypt-4.5.2-4.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND BSD-3-Clause AND BSD-2-Clause AND BSD-2-Clause-FreeBSD AND 0BSD AND CC0-1.0 AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: db80a9643632ced837bc9a2cbaec27f3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxcrypt@4.5.2-4.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxml2-16-aarch64", "name": "libxml2-16", "versionInfo": "2.15.4-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libxml2-16-2.15.4-1.2.hum1.aarch64.rpm", "licenseDeclared": "MIT AND ISC-Veillard AND W3C", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 42dfa79f0ef5d6069cddea1de7c03068"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxml2-16@2.15.4-1.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libzstd-aarch64", "name": "libzstd", "versionInfo": "1.5.7-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libzstd-1.5.7-6.2.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: b8aaeb5f120147f9830dc5f9d40bef28"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libzstd@1.5.7-6.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-linkdupes-aarch64", "name": "linkdupes", "versionInfo": "0.7.3-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/linkdupes-0.7.3-3.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND MIT AND Unicode-DFS-2016 AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND (MIT OR Zlib OR Apache-2.0) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 4eeced9df5b311d36a14928605167834"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/linkdupes@0.7.3-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lua-libs-aarch64", "name": "lua-libs", "versionInfo": "5.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/lua-libs-5.5.1-2.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 29a8431add425bb28338079ae0399718"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lua-libs@5.5.1-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lua-srpm-macros-aarch64", "name": "lua-srpm-macros", "versionInfo": "1-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/lua-srpm-macros-1-18.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 68293f00751e1bc423b0bb2ac4e21221"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lua-srpm-macros@1-18.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lz4-libs-aarch64", "name": "lz4-libs", "versionInfo": "1.10.0-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/lz4-libs-1.10.0-5.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: ccee7d664e4a84d6aa511e3a26f93f9f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lz4-libs@1.10.0-5.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-make-aarch64", "name": "make", "versionInfo": "1:4.4.1-13.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/m/make-4.4.1-13.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND GFDL-1.3-or-later AND FSFULLR", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: fdd58e253669d022aad03b0638c0c47a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/make@4.4.1-13.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-meson-srpm-macros-aarch64", "name": "meson-srpm-macros", "versionInfo": "1.12.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/m/meson-srpm-macros-1.12.1-2.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 7617c98560a327b943961c400248f04b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/meson-srpm-macros@1.12.1-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-mpdecimal-aarch64", "name": "mpdecimal", "versionInfo": "4.0.1-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/m/mpdecimal-4.0.1-4.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 36ba815791916cccfd7c0d0c17792adc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/mpdecimal@4.0.1-4.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-mpfr-aarch64", "name": "mpfr", "versionInfo": "4.2.2-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/m/mpfr-4.2.2-4.hum1.aarch64.rpm", "licenseDeclared": "LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 500593f33c0592c6ee5f536d01f845b7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/mpfr@4.2.2-4.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ncurses-base-aarch64", "name": "ncurses-base", "versionInfo": "6.6-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/n/ncurses-base-6.6-3.1.hum1.noarch.rpm", "licenseDeclared": "MIT-open-group", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: a90d36a4f9603dffe4896cbc1c4c42c0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ncurses-base@6.6-3.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ncurses-libs-aarch64", "name": "ncurses-libs", "versionInfo": "6.6-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/n/ncurses-libs-6.6-3.1.hum1.aarch64.rpm", "licenseDeclared": "MIT-open-group", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: fa3c5788474bd14c1980e9f334fd1b6c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ncurses-libs@6.6-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-nettle-aarch64", "name": "nettle", "versionInfo": "4.0-5.5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/n/nettle-4.0-5.5.hum1.aarch64.rpm", "licenseDeclared": "LGPL-3.0-or-later OR GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 8485733d8b83283c746c07ccb4cd3fce"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/nettle@4.0-5.5.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ngtcp2-crypto-ossl-aarch64", "name": "ngtcp2-crypto-ossl", "versionInfo": "1.22.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/n/ngtcp2-crypto-ossl-1.22.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 7a6ca0d297c88673e5f88c76f501f7fc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ngtcp2-crypto-ossl@1.22.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ngtcp2-aarch64", "name": "ngtcp2", "versionInfo": "1.22.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/n/ngtcp2-1.22.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: e6d8cfb25c0e2eb0ec02bfa93b7c67fe"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ngtcp2@1.22.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-npth-aarch64", "name": "npth", "versionInfo": "1.8-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/n/npth-1.8-5.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 9df021e664b3a2a9bd92cfbb1b829fcf"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/npth@1.8-5.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ocaml-srpm-macros-aarch64", "name": "ocaml-srpm-macros", "versionInfo": "11-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/o/ocaml-srpm-macros-11-4.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 6d563b597c552c5ce842bdd83b6d8dd1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ocaml-srpm-macros@11-4.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openblas-srpm-macros-aarch64", "name": "openblas-srpm-macros", "versionInfo": "2-23.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/o/openblas-srpm-macros-2-23.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: bf3a7ebbd05d3c09e9712e957b99d3b5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openblas-srpm-macros@2-23.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openldap-aarch64", "name": "openldap", "versionInfo": "2.6.15-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/o/openldap-2.6.15-1.1.hum1.aarch64.rpm", "licenseDeclared": "OLDAP-2.8", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 7a0a38a30429c24b8ee796ace3fa72b6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openldap@2.6.15-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssl-fips-provider-upstream-aarch64", "name": "openssl-fips-provider-upstream", "versionInfo": "1:3.5.9-0.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/o/openssl-fips-provider-upstream-3.5.9-0.3.hum1.aarch64.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 7d58b7603194e834c375f9794fc20ec3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssl-fips-provider-upstream@3.5.9-0.3.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssl-libs-aarch64", "name": "openssl-libs", "versionInfo": "1:3.5.9-0.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/o/openssl-libs-3.5.9-0.3.hum1.aarch64.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 0bf0c50423ec91bf21a25ad8a5ad2344"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssl-libs@3.5.9-0.3.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-p11-kit-trust-aarch64", "name": "p11-kit-trust", "versionInfo": "0.26.5-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/p11-kit-trust-0.26.5-1.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 4cbcde19716630f9edfd16711c3fcf51"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/p11-kit-trust@0.26.5-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-p11-kit-aarch64", "name": "p11-kit", "versionInfo": "0.26.5-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/p11-kit-0.26.5-1.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 5f499f9cb33f1d850fd44ddd83f6fd67"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/p11-kit@0.26.5-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-package-notes-srpm-macros-aarch64", "name": "package-notes-srpm-macros", "versionInfo": "0.20-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/package-notes-srpm-macros-0.20-2.hum1.noarch.rpm", "licenseDeclared": "0BSD", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 4f6f48e6009eb2455ec194f477f9b058"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/package-notes-srpm-macros@0.20-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pam-libs-aarch64", "name": "pam-libs", "versionInfo": "1.7.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pam-libs-1.7.2-4.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 0817accdede3b6812ccb3569a779a6d8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pam-libs@1.7.2-4.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-patch-aarch64", "name": "patch", "versionInfo": "2.8-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/patch-2.8-6.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: bad9e359ff686ee0781162c8413e54f5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/patch@2.8-6.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-syntax-aarch64", "name": "pcre2-syntax", "versionInfo": "10.49-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pcre2-syntax-10.49-0.2.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 5892ce77122ec3ecfec34fe8679d2737"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2-syntax@10.49-0.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-aarch64", "name": "pcre2", "versionInfo": "10.49-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pcre2-10.49-0.2.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 622d6d1f1739dc65c97a7364e8a36f54"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2@10.49-0.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-perl-srpm-macros-aarch64", "name": "perl-srpm-macros", "versionInfo": "1-65.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/perl-srpm-macros-1-65.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 0f8b16c4e63430bcff87cb49fa941740"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/perl-srpm-macros@1-65.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-m4-aarch64", "name": "pkgconf-m4", "versionInfo": "2.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pkgconf-m4-2.5.1-2.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later WITH Autoconf-exception-generic", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: e013238a36bb9fbc1d2ca514dddd4ca8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf-m4@2.5.1-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-pkg-config-aarch64", "name": "pkgconf-pkg-config", "versionInfo": "2.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pkgconf-pkg-config-2.5.1-2.hum1.aarch64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: e91759d9d1c1dffe6d066e7953b347f9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf-pkg-config@2.5.1-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-aarch64", "name": "pkgconf", "versionInfo": "2.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pkgconf-2.5.1-2.hum1.aarch64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 465b4584afe124a55cab161a8c54d5b0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf@2.5.1-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-policycoreutils-aarch64", "name": "policycoreutils", "versionInfo": "3.11-2.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/policycoreutils-3.11-2.2.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 30052427d5358a1376d5aafcbbcba925"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/policycoreutils@3.11-2.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-popt-aarch64", "name": "popt", "versionInfo": "1.19-11.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/popt-1.19-11.2.hum1.aarch64.rpm", "licenseDeclared": "MIT AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: a59267807d08c6f2f57cd3504fe46e1b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/popt@1.19-11.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-publicsuffix-list-dafsa-aarch64", "name": "publicsuffix-list-dafsa", "versionInfo": "20260624-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/publicsuffix-list-dafsa-20260624-2.1.hum1.noarch.rpm", "licenseDeclared": "MPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 258b22e06326223e99678d8138bba57d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/publicsuffix-list-dafsa@20260624-2.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pyproject-srpm-macros-aarch64", "name": "pyproject-srpm-macros", "versionInfo": "1.23.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pyproject-srpm-macros-1.23.2-1.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: e82edc55e5be2f520af44c2b0337e92a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pyproject-srpm-macros@1.23.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python-pip-wheel-aarch64", "name": "python-pip-wheel", "versionInfo": "26.2-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/python-pip-wheel-26.2-0.2.hum1.noarch.rpm", "licenseDeclared": "MIT AND Python-2.0.1 AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MPL-2.0 AND (Apache-2.0 OR BSD-2-Clause)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 30b1136e6baf2dc70c7e01a45cf96050"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python-pip-wheel@26.2-0.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python-srpm-macros-aarch64", "name": "python-srpm-macros", "versionInfo": "3.14-12.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/python-srpm-macros-3.14-12.2.hum1.noarch.rpm", "licenseDeclared": "MIT AND PSF-2.0 AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 618d0c006548a702f22df8ec49dca3a5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python-srpm-macros@3.14-12.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-boolean.py-aarch64", "name": "python3-boolean.py", "versionInfo": "5.0-10.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/aarch64/os/Packages/p/python3-boolean.py-5.0-10.fc44.noarch.rpm", "licenseDeclared": "NOASSERTION", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: b7af00dcc3668fd56d3b09f1f1b171a9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-boolean.py@5.0-10.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-libs-aarch64", "name": "python3-libs", "versionInfo": "3.14.8-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/python3-libs-3.14.8-1.1.hum1.aarch64.rpm", "licenseDeclared": "Python-2.0.1 AND MIT AND BSD-3-Clause AND MIT-CMU AND HPND-SMC AND BSD-2-Clause AND dtoa AND Unicode-3.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 49ec99ea0399105d541434d8d38f18da"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-libs@3.14.8-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-license-expression-aarch64", "name": "python3-license-expression", "versionInfo": "30.4.4-4.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/aarch64/os/Packages/p/python3-license-expression-30.4.4-4.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 009ffab3cc792b96ce398d6c97aa5a0a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-license-expression@30.4.4-4.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-aarch64", "name": "python3", "versionInfo": "3.14.8-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/python3-3.14.8-1.1.hum1.aarch64.rpm", "licenseDeclared": "Python-2.0.1", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 18ffabe8c4f4771f14d1a2dbca1a79fe"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3@3.14.8-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-qt5-srpm-macros-aarch64", "name": "qt5-srpm-macros", "versionInfo": "5.15.18-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/q/qt5-srpm-macros-5.15.18-3.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 38abd8c7f1184339bff7ddf1044f1b7d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/qt5-srpm-macros@5.15.18-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-qt6-srpm-macros-aarch64", "name": "qt6-srpm-macros", "versionInfo": "6.11.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/q/qt6-srpm-macros-6.11.2-1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 8684a2b8276c41d1e69ef971a6b044b3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/qt6-srpm-macros@6.11.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-readline-aarch64", "name": "readline", "versionInfo": "8.3-7.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/readline-8.3-7.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 53feb6b9f0049bf2784fa793f91a2910"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/readline@8.3-7.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-redhat-rpm-config-aarch64", "name": "redhat-rpm-config", "versionInfo": "345-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/redhat-rpm-config-345-4.hum1.noarch.rpm", "licenseDeclared": "GPL-1.0-or-later AND GPL-2.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 9e9b9de801d40d8b16d77058da82cde9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/redhat-rpm-config@345-4.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-build-libs-aarch64", "name": "rpm-build-libs", "versionInfo": "6.1.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rpm-build-libs-6.1.0-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 571b3ebbc95d2bc11ab82b0b8635f4ea"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-build-libs@6.1.0-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-build-aarch64", "name": "rpm-build", "versionInfo": "6.1.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rpm-build-6.1.0-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 397b786fbe24fc04b79e40a550d9d3e2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-build@6.1.0-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-libs-aarch64", "name": "rpm-libs", "versionInfo": "6.1.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rpm-libs-6.1.0-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 5758f6832107e8fc785816186dec9a98"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-libs@6.1.0-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-plugin-selinux-aarch64", "name": "rpm-plugin-selinux", "versionInfo": "6.1.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rpm-plugin-selinux-6.1.0-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: cdaaf34399734074ca53f96732b545bd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-plugin-selinux@6.1.0-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-sequoia-aarch64", "name": "rpm-sequoia", "versionInfo": "1.10.1.1-1.5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rpm-sequoia-1.10.1.1-1.5.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.0-or-later AND Apache-2.0 AND BSL-1.0 AND MIT AND Unicode-DFS-2016 AND (Apache-2.0 OR MIT) AND (MIT OR Apache-2.0 OR Zlib) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 1b48403219c7366b55923e38b4f53df4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-sequoia@1.10.1.1-1.5.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-sign-libs-aarch64", "name": "rpm-sign-libs", "versionInfo": "6.1.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rpm-sign-libs-6.1.0-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: a3d41644a0cd1893d5cd718908447081"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-sign-libs@6.1.0-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-aarch64", "name": "rpm", "versionInfo": "6.1.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rpm-6.1.0-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 968faa1cfc70c992089a6b5f4148fcab"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm@6.1.0-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rust-srpm-macros-aarch64", "name": "rust-srpm-macros", "versionInfo": "28.5-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rust-srpm-macros-28.5-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 606a7a2166723ba0e3515fa8244596dc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rust-srpm-macros@28.5-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sed-aarch64", "name": "sed", "versionInfo": "4.10-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/sed-4.10-2.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 3d32547783b16324bc14edaa05196fa0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sed@4.10-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-selinux-policy-targeted-aarch64", "name": "selinux-policy-targeted", "versionInfo": "45.21-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/selinux-policy-targeted-45.21-1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: afd3a0e6066718b6633918ff5031c1ce"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/selinux-policy-targeted@45.21-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-selinux-policy-aarch64", "name": "selinux-policy", "versionInfo": "45.21-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/selinux-policy-45.21-1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 910958d9c5c1913d447a1e64fb0ad0b6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/selinux-policy@45.21-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-setup-aarch64", "name": "setup", "versionInfo": "2.15.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/setup-2.15.1-2.1.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 7306efa4649c49f3d249269ae6781e58"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/setup@2.15.1-2.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-shadow-utils-aarch64", "name": "shadow-utils", "versionInfo": "2:4.20.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/shadow-utils-4.20.0-1.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 2e89cf130885f48a35b69f11f4949c38"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/shadow-utils@4.20.0-1.1.hum1?arch=aarch64&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sqlite-libs-aarch64", "name": "sqlite-libs", "versionInfo": "3.53.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/sqlite-libs-3.53.4-1.1.hum1.aarch64.rpm", "licenseDeclared": "blessing", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: a0ed45cd2ffdc84782c9492e2b3a15a8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sqlite-libs@3.53.4-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-libs-aarch64", "name": "systemd-libs", "versionInfo": "261.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/systemd-libs-261.2-1.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 70d8146669255ba05ce2f1f4569a53ea"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-libs@261.2-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-standalone-sysusers-aarch64", "name": "systemd-standalone-sysusers", "versionInfo": "261.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/systemd-standalone-sysusers-261.2-1.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: c1d8fb208e84a77c514da417404b8f0b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-standalone-sysusers@261.2-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tar-aarch64", "name": "tar", "versionInfo": "2:1.35-10.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/t/tar-1.35-10.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 0118db45814e90065d5182d3a4bab0c8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tar@1.35-10.hum1?arch=aarch64&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tpm2-tss-aarch64", "name": "tpm2-tss", "versionInfo": "4.2.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/t/tpm2-tss-4.2.0-1.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 9ffd7ed639cb171e2130e301bcefd292"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tpm2-tss@4.2.0-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tree-sitter-srpm-macros-aarch64", "name": "tree-sitter-srpm-macros", "versionInfo": "0.4.6-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/t/tree-sitter-srpm-macros-0.4.6-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: f65af17df28df341ec383338fcc47481"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tree-sitter-srpm-macros@0.4.6-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tzdata-aarch64", "name": "tzdata", "versionInfo": "2026e-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/t/tzdata-2026e-1.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain AND (GPL-2.0-only WITH ClassPath-exception-2.0)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: a1336045dee9a14e5ecb98f2e75ca023"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tzdata@2026e-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-unzip-aarch64", "name": "unzip", "versionInfo": "6.0-71.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/u/unzip-6.0-71.hum1.aarch64.rpm", "licenseDeclared": "Info-ZIP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: c32413909b77ce36fe26d1c6ecab8386"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/unzip@6.0-71.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-util-linux-core-aarch64", "name": "util-linux-core", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/u/util-linux-core-2.42.4-2.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: fc17431aba800b112050d86c4f27804b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/util-linux-core@2.42.4-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-util-linux-aarch64", "name": "util-linux", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/u/util-linux-2.42.4-2.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-1.0-or-later AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 87a04208a28df627928b6ffdc49da18a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/util-linux@2.42.4-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-which-aarch64", "name": "which", "versionInfo": "2.25-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/w/which-2.25-2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 747a9cd9e442fc5c1985bc67953c18d6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/which@2.25-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xxhash-libs-aarch64", "name": "xxhash-libs", "versionInfo": "0.8.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/x/xxhash-libs-0.8.4-1.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 94a4e68282f894848dfcd600c156394a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xxhash-libs@0.8.4-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xz-libs-aarch64", "name": "xz-libs", "versionInfo": "1:5.8.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/x/xz-libs-5.8.4-1.1.hum1.aarch64.rpm", "licenseDeclared": "0BSD", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 712ddac4015f3e0a52a2b3f765e8e191"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xz-libs@5.8.4-1.1.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xz-aarch64", "name": "xz", "versionInfo": "1:5.8.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/x/xz-5.8.4-1.1.hum1.aarch64.rpm", "licenseDeclared": "0BSD AND GPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: db94e077cd214b5c423f7b4c59622c14"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xz@5.8.4-1.1.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zig-srpm-macros-aarch64", "name": "zig-srpm-macros", "versionInfo": "1-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/z/zig-srpm-macros-1-9.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 0c226eb1fa4d5fc3d272055b6397b077"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zig-srpm-macros@1-9.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zip-aarch64", "name": "zip", "versionInfo": "3.0-45.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/z/zip-3.0-45.1.hum1.aarch64.rpm", "licenseDeclared": "Info-ZIP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: b7f6bc60325f5aab6ac6773968e28bf6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zip@3.0-45.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zlib-ng-compat-aarch64", "name": "zlib-ng-compat", "versionInfo": "2.3.3-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/z/zlib-ng-compat-2.3.3-6.1.hum1.aarch64.rpm", "licenseDeclared": "Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 06962c93fec8b49e0c12e23e7154ded4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zlib-ng-compat@2.3.3-6.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zstd-aarch64", "name": "zstd", "versionInfo": "1.5.7-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/z/zstd-1.5.7-6.2.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 0537b67afcf0c266515477de756f6dee"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zstd@1.5.7-6.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-dex-x86-64", "name": "dex-buildroot-x86_64", "versionInfo": "77531cad", "downloadLocation": "NOASSERTION", "filesAnalyzed": false}, {"SPDXID": "SPDXRef-Buildroot-Package-R-srpm-macros-x86-64", "name": "R-srpm-macros", "versionInfo": "1.3.7-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/R-srpm-macros-1.3.7-3.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: af95299e83e51b62a40fa7a42d357077"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/R-srpm-macros@1.3.7-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-add-determinism-x86-64", "name": "add-determinism", "versionInfo": "0.7.3-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/add-determinism-0.7.3-3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND MIT AND Unicode-DFS-2016 AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 OR MIT) AND (Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND (MIT OR Zlib OR Apache-2.0) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: d599f3c879b1a93f7a50d8c2c2f8aa2e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/add-determinism@0.7.3-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-alternatives-x86-64", "name": "alternatives", "versionInfo": "1.33-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/alternatives-1.33-6.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 5eb4df30f945eef277e2acb1c5b781e6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/alternatives@1.33-6.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-annobin-docs-x86-64", "name": "annobin-docs", "versionInfo": "13.32-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/annobin-docs-13.32-1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND GFDL-1.3-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: f7b82d32f1e08c859e3b8de4668a28fc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/annobin-docs@13.32-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-annobin-plugin-gcc-x86-64", "name": "annobin-plugin-gcc", "versionInfo": "13.32-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/annobin-plugin-gcc-13.32-1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND GFDL-1.3-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 1991f67e2f7fb6d4602ec35f7858683d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/annobin-plugin-gcc@13.32-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ansible-srpm-macros-x86-64", "name": "ansible-srpm-macros", "versionInfo": "1-22.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/ansible-srpm-macros-1-22.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 6343ff368e5236625d015dbc91e70769"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ansible-srpm-macros@1-22.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-askalono-cli-x86-64", "name": "askalono-cli", "versionInfo": "0.5.0-4.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/a/askalono-cli-0.5.0-4.fc44.x86_64.rpm", "licenseDeclared": "Apache-2.0 AND CC0-1.0 AND MIT AND Unicode-DFS-2016 AND (Apache-2.0 OR BSL-1.0) AND (Apache-2.0 OR MIT) AND (MIT OR Apache-2.0 OR Zlib) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 02a05ce513bee7180cb21f5cd846f783"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/askalono-cli@0.5.0-4.fc44?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-audit-libs-x86-64", "name": "audit-libs", "versionInfo": "4.2.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/audit-libs-4.2.1-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: ec3ac4d4c3901cbd76eb9447ca97e720"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/audit-libs@4.2.1-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bash-x86-64", "name": "bash", "versionInfo": "5.3.15-2.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/bash-5.3.15-2.2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 92afae1e24f7a04e5535219602ccbe9b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bash@5.3.15-2.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-binutils-x86-64", "name": "binutils", "versionInfo": "2.46.1-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/binutils-2.46.1-1.2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-3.0-or-later WITH Bison-exception-2.2) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND BSD-3-Clause AND GFDL-1.3-or-later AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: b412b4b29a227a1db90d9f002da04498"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/binutils@2.46.1-1.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-build-reproducibility-srpm-macros-x86-64", "name": "build-reproducibility-srpm-macros", "versionInfo": "0.7.3-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/build-reproducibility-srpm-macros-0.7.3-3.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: b7d13395d88324c0009658f89c21ec4d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/build-reproducibility-srpm-macros@0.7.3-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bzip2-libs-x86-64", "name": "bzip2-libs", "versionInfo": "1.0.8-24.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/bzip2-libs-1.0.8-24.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-4-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 3d0299d5f7edb1ddf3d7737a8b344bca"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bzip2-libs@1.0.8-24.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bzip2-x86-64", "name": "bzip2", "versionInfo": "1.0.8-24.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/bzip2-1.0.8-24.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-4-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 25ceddb521c14cc7bc826c0ec6640adc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bzip2@1.0.8-24.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ca-certificates-x86-64", "name": "ca-certificates", "versionInfo": "2026.2.90_v9.0.317-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/ca-certificates-2026.2.90_v9.0.317-1.1.hum1.noarch.rpm", "licenseDeclared": "MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: a195cd97c3daf258791a89c2b5af39d2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ca-certificates@2026.2.90_v9.0.317-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cmake-srpm-macros-x86-64", "name": "cmake-srpm-macros", "versionInfo": "4.3.0-5.5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/cmake-srpm-macros-4.3.0-5.5.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND MIT-open-group AND Zlib AND Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 6d134201d58dbfdf148c024e8e47a576"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cmake-srpm-macros@4.3.0-5.5.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-coreutils-common-x86-64", "name": "coreutils-common", "versionInfo": "9.12-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/coreutils-common-9.12-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-no-invariants-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 07e605a0b418cccac841adc20aa4ba1c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/coreutils-common@9.12-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-coreutils-x86-64", "name": "coreutils", "versionInfo": "9.12-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/coreutils-9.12-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-no-invariants-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: ebcb432638b4811a1b7f8f89f4aff370"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/coreutils@9.12-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cpio-x86-64", "name": "cpio", "versionInfo": "2.15-10.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/cpio-2.15-10.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: c073bae358997220d77e1ef8887532d0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cpio@2.15-10.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cpp-x86-64", "name": "cpp", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/cpp-16.2.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 6155d5751aec01ed71d09c9f8e94551e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cpp@16.2.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-crypto-policies-config-default-x86-64", "name": "crypto-policies-config-default", "versionInfo": "20260812-1.git359ab16.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/crypto-policies-config-default-20260812-1.git359ab16.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 1e6fce169a2973e4f665428cb52ae9ad"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/crypto-policies-config-default@20260812-1.git359ab16.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-crypto-policies-x86-64", "name": "crypto-policies", "versionInfo": "20260812-1.git359ab16.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/crypto-policies-20260812-1.git359ab16.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 9756d9b800cfeafa3f39e494328a620e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/crypto-policies@20260812-1.git359ab16.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-curl-x86-64", "name": "curl", "versionInfo": "8.22.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/curl-8.22.0-1.1.hum1.x86_64.rpm", "licenseDeclared": "curl", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 780e451ae2b4d6a094306b9aaa666887"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/curl@8.22.0-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cyrus-sasl-lib-x86-64", "name": "cyrus-sasl-lib", "versionInfo": "2.1.28-37.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/cyrus-sasl-lib-2.1.28-37.2.hum1.x86_64.rpm", "licenseDeclared": "BSD-Attribution-HPND-disclaimer", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 7010d12ef8d1784c80154ffb153fba63"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cyrus-sasl-lib@2.1.28-37.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-debugedit-x86-64", "name": "debugedit", "versionInfo": "5.3-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/d/debugedit-5.3-3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 4510f40574dd3d6c447121aad1bfb3a9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/debugedit@5.3-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-diffutils-x86-64", "name": "diffutils", "versionInfo": "3.12-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/d/diffutils-3.12-6.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 0f1fdf69f5ed7422a5669c80a7fdf1d2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/diffutils@3.12-6.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-dwz-x86-64", "name": "dwz", "versionInfo": "0.17-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/d/dwz-0.17-3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND GPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 857b4cf1ffa022a0d3fd4237703ed33a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/dwz@0.17-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ed-x86-64", "name": "ed", "versionInfo": "1.22.6-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/ed-1.22.6-1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-only AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 67e9e412f7f6eb77770feadf190fff63"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ed@1.22.6-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-efi-srpm-macros-x86-64", "name": "efi-srpm-macros", "versionInfo": "6-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/efi-srpm-macros-6-9.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: cba49c2554beb37df9cc6bb744737e2b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/efi-srpm-macros@6-9.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-debuginfod-client-x86-64", "name": "elfutils-debuginfod-client", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/elfutils-debuginfod-client-0.196-1.1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-2.0-or-later OR LGPL-3.0-or-later)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: c6950ee47cabdbb447dd12e8f11ce2ec"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-debuginfod-client@0.196-1.1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-libelf-x86-64", "name": "elfutils-libelf", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/elfutils-libelf-0.196-1.1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 5fdb83b704a22368baf3ebd09ce19139"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-libelf@0.196-1.1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-libs-x86-64", "name": "elfutils-libs", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/elfutils-libs-0.196-1.1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: e1794cbfac97b414417c7c242229bf1c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-libs@0.196-1.1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-x86-64", "name": "elfutils", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/elfutils-0.196-1.1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-2.0-or-later OR LGPL-3.0-or-later) AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 085e3d859dfa30b810917353c33e9feb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils@0.196-1.1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-erlang-srpm-macros-x86-64", "name": "erlang-srpm-macros", "versionInfo": "0.3.11-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/erlang-srpm-macros-0.3.11-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 063020bc2b254fec865c06f313930cec"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/erlang-srpm-macros@0.3.11-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-expat-x86-64", "name": "expat", "versionInfo": "2.8.5-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/expat-2.8.5-1.2.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 0c5cbf6236a08bc929ff502c28ef9da1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/expat@2.8.5-1.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-file-libs-x86-64", "name": "file-libs", "versionInfo": "5.48-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/file-libs-5.48-3.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause-Darwin AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 693d8445c4e52df1e5fad8a746e3089b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/file-libs@5.48-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-filesystem-srpm-macros-x86-64", "name": "filesystem-srpm-macros", "versionInfo": "3.18-59.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/filesystem-srpm-macros-3.18-59.1.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: cff1a42588f4eb1a758735b668069a67"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/filesystem-srpm-macros@3.18-59.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-filesystem-x86-64", "name": "filesystem", "versionInfo": "3.18-59.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/filesystem-3.18-59.1.hum1.x86_64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: a736f1c0487b505dd6c16ceaaeb3f0a4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/filesystem@3.18-59.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-file-x86-64", "name": "file", "versionInfo": "5.48-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/file-5.48-3.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause-Darwin AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: fc18ee9b195bb0bef239935848f36eb0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/file@5.48-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-findutils-x86-64", "name": "findutils", "versionInfo": "1:4.11.0-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/findutils-4.11.0-2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: a6ab9adb99798fd43e71b67daa2fe8b8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/findutils@4.11.0-2.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-fonts-srpm-macros-x86-64", "name": "fonts-srpm-macros", "versionInfo": "1:5.0.0-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/fonts-srpm-macros-5.0.0-4.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 72e451571f24737949a256d091508d0c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/fonts-srpm-macros@5.0.0-4.hum1?arch=noarch&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-forge-srpm-macros-x86-64", "name": "forge-srpm-macros", "versionInfo": "0.4.0-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/forge-srpm-macros-0.4.0-5.hum1.noarch.rpm", "licenseDeclared": "GPL-1.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: bfbed65969ec708556df3750591a377d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/forge-srpm-macros@0.4.0-5.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-fpc-srpm-macros-x86-64", "name": "fpc-srpm-macros", "versionInfo": "1.3-17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/fpc-srpm-macros-1.3-17.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 1f7e4cb902ccc37236f8d34ff8873cf2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/fpc-srpm-macros@1.3-17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gap-srpm-macros-x86-64", "name": "gap-srpm-macros", "versionInfo": "2-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gap-srpm-macros-2-3.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 70e3423696085d13791fefc0be7cdf15"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gap-srpm-macros@2-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gawk-x86-64", "name": "gawk", "versionInfo": "5.4.1-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gawk-5.4.1-1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: aa0b0ed2ab703a0a1380be08760ac1c1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gawk@5.4.1-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gcc-plugin-annobin-x86-64", "name": "gcc-plugin-annobin", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gcc-plugin-annobin-16.2.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: f2b83ae39c4c6509f801b0c8b2dd22b6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gcc-plugin-annobin@16.2.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gcc-x86-64", "name": "gcc", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gcc-16.2.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: f9ac343d0c30d96195e02f2b54883446"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gcc@16.2.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gdb-minimal-x86-64", "name": "gdb-minimal", "versionInfo": "17.2-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gdb-minimal-17.2-6.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND BSD-3-Clause AND FSFAP AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain AND GFDL-1.3-or-later AND LGPL-2.0-or-later WITH GCC-exception-2.0 AND GPL-3.0-or-later WITH GCC-exception-3.1 AND GPL-2.0-or-later WITH GNU-compiler-exception AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: eecc3642be0c160e16f5cf1569b8f3fd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gdb-minimal@17.2-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gdbm-libs-x86-64", "name": "gdbm-libs", "versionInfo": "1:1.26-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gdbm-libs-1.26-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 1d2adcfbc7a8c3d3e29e56db4d441037"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gdbm-libs@1.26-1.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ghc-srpm-macros-x86-64", "name": "ghc-srpm-macros", "versionInfo": "1.10-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/ghc-srpm-macros-1.10-2.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: c59363c566e4f370953f5f4b048e594e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ghc-srpm-macros@1.10-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-common-x86-64", "name": "glibc-common", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-common-2.43-9.2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 9eab516d0f80b295960361b63b319245"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-common@2.43-9.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-devel-x86-64", "name": "glibc-devel", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-devel-2.43-9.2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 4ab96fa4ca1a669a0d850091bdd89486"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-devel@2.43-9.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-gconv-extra-x86-64", "name": "glibc-gconv-extra", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-gconv-extra-2.43-9.2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: eaeef60b7dbad9934cccc55d1dd62c80"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-gconv-extra@2.43-9.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-minimal-langpack-x86-64", "name": "glibc-minimal-langpack", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-minimal-langpack-2.43-9.2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 9d9998236922ccfdf80f9cbfa061931a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-minimal-langpack@2.43-9.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-x86-64", "name": "glibc", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-2.43-9.2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 41c73a734782d852fc7481d7fbd4130a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc@2.43-9.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gmp-x86-64", "name": "gmp", "versionInfo": "1:6.3.0-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gmp-6.3.0-6.1.hum1.x86_64.rpm", "licenseDeclared": "(LGPL-3.0-or-later OR GPL-2.0-or-later OR (LGPL-3.0-or-later AND GPL-2.0-or-later)) AND GFDL-1.3-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 2c7e7fb43e049cf045044f4d5bcf6fb1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gmp@6.3.0-6.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnat-srpm-macros-x86-64", "name": "gnat-srpm-macros", "versionInfo": "7-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnat-srpm-macros-7-3.hum1.noarch.rpm", "licenseDeclared": "FSFAP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 66efb6ab04e5e1a84478a688e2f149a3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnat-srpm-macros@7-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnome-srpm-macros-x86-64", "name": "gnome-srpm-macros", "versionInfo": "1.0-1.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/updates/44/Everything/x86_64/Packages/g/gnome-srpm-macros-1.0-1.fc44.noarch.rpm", "licenseDeclared": "Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 2bbaa6afcb861d76b0036e4b5bf9b3be"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnome-srpm-macros@1.0-1.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnulib-l10n-x86-64", "name": "gnulib-l10n", "versionInfo": "20241231-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnulib-l10n-20241231-4.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 5628836ab4d4e824bcadb20d87a01a33"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnulib-l10n@20241231-4.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-dirmngr-x86-64", "name": "gnupg2-dirmngr", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-dirmngr-2.4.9-18.2.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 64faf73544d16702ac4caeaed331a9de"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-dirmngr@2.4.9-18.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-gpg-agent-x86-64", "name": "gnupg2-gpg-agent", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-gpg-agent-2.4.9-18.2.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 9546299c3fa6e253822bbb48b47564a9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-gpg-agent@2.4.9-18.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-gpgconf-x86-64", "name": "gnupg2-gpgconf", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-gpgconf-2.4.9-18.2.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 017d50061482f5af2a52687e6bfeeded"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-gpgconf@2.4.9-18.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-keyboxd-x86-64", "name": "gnupg2-keyboxd", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-keyboxd-2.4.9-18.2.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: bb774c82d733bb4b5bcacbcfcc136a0d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-keyboxd@2.4.9-18.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-verify-x86-64", "name": "gnupg2-verify", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-verify-2.4.9-18.2.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 0b9ed17086f9631984af7ad0b65ed7be"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-verify@2.4.9-18.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-x86-64", "name": "gnupg2", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-2.4.9-18.2.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 8ed8d266f88c4e5d1ddc093f83220a2b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2@2.4.9-18.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnutls-x86-64", "name": "gnutls", "versionInfo": "3.8.13-5.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnutls-3.8.13-5.2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: dfbbb8930398b4570e1f04b3cecbce3d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnutls@3.8.13-5.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-filesystem-x86-64", "name": "go-filesystem", "versionInfo": "3.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/go-filesystem-3.8.0-3.hum1.x86_64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: b7ba053e6fc52967827728a4a06c6592"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-filesystem@3.8.0-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-rpm-macros-x86-64", "name": "go-rpm-macros", "versionInfo": "3.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/go-rpm-macros-3.8.0-3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 9ee7b1a24cd488ecf4304dfe6dbedc8f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-rpm-macros@3.8.0-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-srpm-macros-x86-64", "name": "go-srpm-macros", "versionInfo": "3.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/go-srpm-macros-3.8.0-3.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 58fd7d8eb056ce7d09e3ba375de1effc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-srpm-macros@3.8.0-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-vendor-tools-x86-64", "name": "go-vendor-tools", "versionInfo": "0.12.0-1.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/updates/44/Everything/x86_64/Packages/g/go-vendor-tools-0.12.0-1.fc44.noarch.rpm", "licenseDeclared": "MIT AND BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 7c4ed6389413dbed713121b1168f24da"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-vendor-tools@0.12.0-1.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-bin-x86-64", "name": "golang1.27-bin", "versionInfo": "1.27.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/golang1.27-bin-1.27.1-2.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 5d494cb2adb44c9df44d9ce58121104d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27-bin@1.27.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-src-x86-64", "name": "golang1.27-src", "versionInfo": "1.27.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/golang1.27-src-1.27.1-2.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 836c68a2d4a36e53e33ae1587ba7e23d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27-src@1.27.1-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-x86-64", "name": "golang1.27", "versionInfo": "1.27.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/golang1.27-1.27.1-2.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 075418c7c86a2f83e2870f0ef04b1b64"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27@1.27.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golist-x86-64", "name": "golist", "versionInfo": "0.11.0-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/golist-0.11.0-2.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause AND BSD-3-Clause AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: c94866cb8a1c5c8a4f2192fce2ae701f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golist@0.11.0-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gpgverify-x86-64", "name": "gpgverify", "versionInfo": "2.2-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gpgverify-2.2-5.hum1.noarch.rpm", "licenseDeclared": "Boehm-GC", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 9637bdca60814388d4c5b144d923e6d4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gpgverify@2.2-5.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-grep-x86-64", "name": "grep", "versionInfo": "3.12-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/grep-3.12-4.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 30caafcf9e86d9e314469049d27a486b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/grep@3.12-4.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gzip-x86-64", "name": "gzip", "versionInfo": "1.14-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gzip-1.14-4.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 23b0f59e33577a569a570da5c778a94b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gzip@1.14-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-gpg-keys-x86-64", "name": "hummingbird-gpg-keys", "versionInfo": "20251124-1.17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/h/hummingbird-gpg-keys-20251124-1.17.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 01a73721cc0ecdcb5d9f3929f6777157"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-gpg-keys@20251124-1.17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-release-x86-64", "name": "hummingbird-release", "versionInfo": "20251124-1.17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/h/hummingbird-release-20251124-1.17.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: d1c993eba75002797ea72c3cd1266853"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-release@20251124-1.17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-repos-x86-64", "name": "hummingbird-repos", "versionInfo": "20251124-1.17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/h/hummingbird-repos-20251124-1.17.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 1704eb0434ddab68e1c756070246f576"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-repos@20251124-1.17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ima-evm-utils-libs-x86-64", "name": "ima-evm-utils-libs", "versionInfo": "1.6.2-12.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/i/ima-evm-utils-libs-1.6.2-12.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 3f7e9a8fa123cd5e5ea89cf63473c45e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ima-evm-utils-libs@1.6.2-12.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-info-x86-64", "name": "info", "versionInfo": "7.2-9.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/i/info-7.2-9.fc44.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 7cd06c9116234e26a968b1c2ff5be47d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/info@7.2-9.fc44?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-jansson-x86-64", "name": "jansson", "versionInfo": "2.14-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/jansson-2.14-5.hum1.x86_64.rpm", "licenseDeclared": "MIT AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: e8197a7cf76ae8dbc808b4e96fefb59f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/jansson@2.14-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-java-srpm-macros-x86-64", "name": "java-srpm-macros", "versionInfo": "1-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/java-srpm-macros-1-9.hum1.noarch.rpm", "licenseDeclared": "MIT-0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 367fafb59cbd6a02034ba8bafdafe9c9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/java-srpm-macros@1-9.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-json-c-x86-64", "name": "json-c", "versionInfo": "0.18-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/json-c-0.18-9.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 6fec8b09fc93d23dba88f03b024fb073"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/json-c@0.18-9.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-kernel-headers-x86-64", "name": "kernel-headers", "versionInfo": "7.2.0-61.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/k/kernel-headers-7.2.0-61.hum1.x86_64.rpm", "licenseDeclared": "((GPL-2.0-only WITH Linux-syscall-note) OR BSD-2-Clause) AND ((GPL-2.0-only WITH Linux-syscall-note) OR BSD-3-Clause) AND ((GPL-2.0-only WITH Linux-syscall-note) OR CDDL-1.0) AND ((GPL-2.0-only WITH Linux-syscall-note) OR Linux-OpenIB) AND ((GPL-2.0-only WITH Linux-syscall-note) OR MIT) AND ((GPL-2.0-or-later WITH Linux-syscall-note) OR BSD-3-Clause) AND ((GPL-2.0-or-later WITH Linux-syscall-note) OR MIT) AND BSD-3-Clause AND (GPL-1.0-or-later WITH Linux-syscall-note) AND GPL-2.0-only AND (GPL-2.0-only WITH Linux-syscall-note) AND (GPL-2.0-or-later WITH Linux-syscall-note) AND (LGPL-2.0-or-later WITH Linux-syscall-note) AND (LGPL-2.1-only WITH Linux-syscall-note) AND (LGPL-2.1-or-later WITH Linux-syscall-note) AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: f84364e16e93caeed82e1c2d9fdcb008"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/kernel-headers@7.2.0-61.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-kernel-srpm-macros-x86-64", "name": "kernel-srpm-macros", "versionInfo": "1.0-30.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/k/kernel-srpm-macros-1.0-30.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: d6fe851b8eed59b0b3ed90411974a3f1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/kernel-srpm-macros@1.0-30.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-keyutils-libs-x86-64", "name": "keyutils-libs", "versionInfo": "1.6.3-8.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/k/keyutils-libs-1.6.3-8.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 83cd2236fb6d56defe7beca1256cca78"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/keyutils-libs@1.6.3-8.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-krb5-libs-x86-64", "name": "krb5-libs", "versionInfo": "1.22.2-10.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/k/krb5-libs-1.22.2-10.1.hum1.x86_64.rpm", "licenseDeclared": "Brian-Gladman-2-Clause AND BSD-2-Clause AND (BSD-2-Clause OR GPL-2.0-or-later) AND BSD-2-Clause-first-lines AND BSD-3-Clause AND BSD-4-Clause AND CMU-Mach-nodoc AND FSFULLRWD AND HPND AND HPND-export2-US AND HPND-export-US AND HPND-export-US-acknowledgement AND HPND-export-US-modify AND ISC AND MIT AND MIT-CMU AND OLDAP-2.8 AND OpenVision", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 15e6525dda7e94d8f2fbca74b762300f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/krb5-libs@1.22.2-10.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libacl-x86-64", "name": "libacl", "versionInfo": "2.4.0-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libacl-2.4.0-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 788fb6fac6ab4116feaef2e0300ea57e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libacl@2.4.0-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libarchive-x86-64", "name": "libarchive", "versionInfo": "3.8.9-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libarchive-3.8.9-2.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause AND FSFULLR AND GPL-2.0-or-later WITH Libtool-exception AND BSD-3-Clause AND FSFUL", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: aad0303990bb1b04a5105825aeaf3001"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libarchive@3.8.9-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libassuan-x86-64", "name": "libassuan", "versionInfo": "2.5.7-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libassuan-2.5.7-6.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 059b8af761f036d632500cc22cec31e6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libassuan@2.5.7-6.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libatomic-x86-64", "name": "libatomic", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libatomic-16.2.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 47ab6b5acecd7d6ae9a3eb6615e15c91"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libatomic@16.2.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libattr-x86-64", "name": "libattr", "versionInfo": "2.6.0-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libattr-2.6.0-9.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: d585f6a64162151c857c9401a1cbf3e0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libattr@2.6.0-9.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libblkid-x86-64", "name": "libblkid", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libblkid-2.42.4-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: c88859e9e7d00ebc2e15e6b98baf950d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libblkid@2.42.4-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libbrotli-x86-64", "name": "libbrotli", "versionInfo": "1.2.0-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libbrotli-1.2.0-6.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 85f2f47512d9d8f986fb8a1c04cc5aa6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libbrotli@1.2.0-6.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcap-ng-x86-64", "name": "libcap-ng", "versionInfo": "0.9.6-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcap-ng-0.9.6-1.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 5fd3db66052d3df8f713e523c13a955f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcap-ng@0.9.6-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcap-x86-64", "name": "libcap", "versionInfo": "2.78-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcap-2.78-2.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 67f4e2e447638ef6423ec37215870ea1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcap@2.78-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcbor-x86-64", "name": "libcbor", "versionInfo": "0.14.0-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcbor-0.14.0-3.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 9a33095c506ec5bd6d7c3b525cef087a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcbor@0.14.0-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcom-err-x86-64", "name": "libcom_err", "versionInfo": "1.47.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcom_err-1.47.4-2.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: e24ccc4e4b721fc269fa4ded6adba3be"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcom_err@1.47.4-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcurl-x86-64", "name": "libcurl", "versionInfo": "8.22.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcurl-8.22.0-1.1.hum1.x86_64.rpm", "licenseDeclared": "curl", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 1428e163e746597d1e33a36f58c93680"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcurl@8.22.0-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libeconf-x86-64", "name": "libeconf", "versionInfo": "0.7.9-4.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libeconf-0.7.9-4.2.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 1ccc14f8674aec8c899ee0eeded54f81"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libeconf@0.7.9-4.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libevent-x86-64", "name": "libevent", "versionInfo": "2.1.13-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libevent-2.1.13-1.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND ISC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: f30ba9b3193b576be7b3da4364c75e55"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libevent@2.1.13-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfdisk-x86-64", "name": "libfdisk", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libfdisk-2.42.4-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: bed12a724f795ae4a0f119dd179dd169"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfdisk@2.42.4-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libffi-x86-64", "name": "libffi", "versionInfo": "3.8.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libffi-3.8.0-1.1.hum1.x86_64.rpm", "licenseDeclared": "MIT AND CC-PDDC AND (GPL-3.0-or-later WITH Texinfo-exception)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: bfcd0557f6f7d71f78389a2f255f84ee"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libffi@3.8.0-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfido2-x86-64", "name": "libfido2", "versionInfo": "1.17.0-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libfido2-1.17.0-6.2.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 8b9b7eff333cbda55fa9d7d24667f672"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfido2@1.17.0-6.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfsverity-x86-64", "name": "libfsverity", "versionInfo": "1.7-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libfsverity-1.7-4.1.hum1.x86_64.rpm", "licenseDeclared": "NOASSERTION", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 372c392dc177e9b4587046fed56f0d6e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfsverity@1.7-4.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgcc-x86-64", "name": "libgcc", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libgcc-16.2.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: d9f9b38741e47aa97fa57d4394c05e85"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgcc@16.2.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgcrypt-x86-64", "name": "libgcrypt", "versionInfo": "1.12.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libgcrypt-1.12.4-1.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND (BSD-3-Clause OR GPL-2.0-only) AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later AND MIT-Modern-Variant", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: f4bef4bc6a67ba46ac13e78047c07a4a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgcrypt@1.12.4-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgomp-x86-64", "name": "libgomp", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libgomp-16.2.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 9b500e97526ccc46e490b028b56ed8d7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgomp@16.2.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgpg-error-x86-64", "name": "libgpg-error", "versionInfo": "1.61-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libgpg-error-1.61-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND (BSD-3-Clause OR LGPL-2.1-or-later) AND FSFULLR AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: b47f6024eae245a48d6413e5ea9ddd49"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgpg-error@1.61-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libidn2-x86-64", "name": "libidn2", "versionInfo": "2.3.8-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libidn2-2.3.8-4.1.hum1.x86_64.rpm", "licenseDeclared": "(GPL-2.0-or-later OR LGPL-3.0-or-later) AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 81f930e418fc54a1e008fa2b2ed09873"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libidn2@2.3.8-4.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libksba-x86-64", "name": "libksba", "versionInfo": "1.8.1-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libksba-1.8.1-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND (LGPL-3.0-or-later OR GPL-2.0-or-later)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 791730e4835155fab5a86f2022ad6df6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libksba@1.8.1-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-liblastlog2-x86-64", "name": "liblastlog2", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/liblastlog2-2.42.4-2.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 3cb1e0b98469b5d3d68474923c0d81f9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/liblastlog2@2.42.4-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libmount-x86-64", "name": "libmount", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libmount-2.42.4-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: d37fd9e0844a0a7a78353fbd66fdb31a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libmount@2.42.4-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libmpc-x86-64", "name": "libmpc", "versionInfo": "1.4.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libmpc-1.4.1-2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-3.0-or-later AND FSFAP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: a494fa5948db54e21ceab510f4811ce7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libmpc@1.4.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnghttp2-x86-64", "name": "libnghttp2", "versionInfo": "1.69.0-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libnghttp2-1.69.0-6.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 45fc7389fd2b921540a7531e83c70187"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnghttp2@1.69.0-6.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnghttp3-x86-64", "name": "libnghttp3", "versionInfo": "1.18.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libnghttp3-1.18.0-1.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: d4a67b9f63187cba69ee5cbf3881b097"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnghttp3@1.18.0-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpfm-x86-64", "name": "libpfm", "versionInfo": "4.13.0-20.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/updates/44/Everything/x86_64/Packages/l/libpfm-4.13.0-20.fc44.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 8d3340a34243fe94badf7ab91f89d20c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpfm@4.13.0-20.fc44?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpkgconf-x86-64", "name": "libpkgconf", "versionInfo": "2.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libpkgconf-2.5.1-2.hum1.x86_64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 48c108eef9d6ae92f86afa0832cd5bb9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpkgconf@2.5.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpsl-x86-64", "name": "libpsl", "versionInfo": "0.23.3-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libpsl-0.23.3-1.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 075540620d092a55ab448679a2415dee"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpsl@0.23.3-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libselinux-utils-x86-64", "name": "libselinux-utils", "versionInfo": "3.11-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libselinux-utils-3.11-5.1.hum1.x86_64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 2a10779a6db7dff145f6ad9849a537dd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libselinux-utils@3.11-5.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libselinux-x86-64", "name": "libselinux", "versionInfo": "3.11-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libselinux-3.11-5.1.hum1.x86_64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: df2dff5bcf4c74661cbdd8c7d8690c9d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libselinux@3.11-5.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsemanage-x86-64", "name": "libsemanage", "versionInfo": "3.11-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libsemanage-3.11-4.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: e315e8f4c05e9ff1a8550c96728143db"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsemanage@3.11-4.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsepol-x86-64", "name": "libsepol", "versionInfo": "3.11-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libsepol-3.11-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 22ccfb73f7b0fa00c7eea35897c331c3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsepol@3.11-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsmartcols-x86-64", "name": "libsmartcols", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libsmartcols-2.42.4-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 04a86365c7c38a3097c848d8a32de300"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsmartcols@2.42.4-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libssh-config-x86-64", "name": "libssh-config", "versionInfo": "0.12.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libssh-config-0.12.2-1.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: f26ba5abb68d2fea08f751a8569faa35"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libssh-config@0.12.2-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libssh-x86-64", "name": "libssh", "versionInfo": "0.12.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libssh-0.12.2-1.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 2a67c00b820489c0075d8475b6764b45"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libssh@0.12.2-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libstdc++-x86-64", "name": "libstdc++", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libstdc++-16.2.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 1d29dc0cf0b01c168d3f6f050c84311c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libstdc++@16.2.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtasn1-x86-64", "name": "libtasn1", "versionInfo": "4.21.0-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libtasn1-4.21.0-2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 1752b9dd0a834fca70607e8dea809765"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtasn1@4.21.0-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtool-ltdl-x86-64", "name": "libtool-ltdl", "versionInfo": "2.6.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libtool-ltdl-2.6.2-1.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later WITH Libtool-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 4ed75e065e82bb447bc9e57a1108063e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtool-ltdl@2.6.2-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libunistring-x86-64", "name": "libunistring", "versionInfo": "1.1-12.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libunistring-1.1-12.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 58d6c066070b8ba39b68b8ce4475d903"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libunistring@1.1-12.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libusb1-x86-64", "name": "libusb1", "versionInfo": "1.0.30-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libusb1-1.0.30-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 3ed4be7f3910f98f9bf6a42d49b5de70"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libusb1@1.0.30-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libuuid-x86-64", "name": "libuuid", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libuuid-2.42.4-2.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 8c9afb13ed8e067848e0d260a5745c86"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libuuid@2.42.4-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libverto-x86-64", "name": "libverto", "versionInfo": "0.3.2-13.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libverto-0.3.2-13.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 5c04a48b08efca2f367581cf22f3ea79"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libverto@0.3.2-13.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxcrypt-devel-x86-64", "name": "libxcrypt-devel", "versionInfo": "4.5.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libxcrypt-devel-4.5.2-4.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND BSD-3-Clause AND BSD-2-Clause AND BSD-2-Clause-FreeBSD AND 0BSD AND CC0-1.0 AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: ccac5efc5f591f331023dbafda4d5a2f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxcrypt-devel@4.5.2-4.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxcrypt-x86-64", "name": "libxcrypt", "versionInfo": "4.5.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libxcrypt-4.5.2-4.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND BSD-3-Clause AND BSD-2-Clause AND BSD-2-Clause-FreeBSD AND 0BSD AND CC0-1.0 AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: b76c1e01a696f4ec876c524bbf9c21ae"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxcrypt@4.5.2-4.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxml2-16-x86-64", "name": "libxml2-16", "versionInfo": "2.15.4-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libxml2-16-2.15.4-1.2.hum1.x86_64.rpm", "licenseDeclared": "MIT AND ISC-Veillard AND W3C", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 9371c6f0a380cce6e0df9815a66b5fe3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxml2-16@2.15.4-1.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libzstd-x86-64", "name": "libzstd", "versionInfo": "1.5.7-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libzstd-1.5.7-6.2.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 4607fb5e4380e49438e2b427f64e4bfb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libzstd@1.5.7-6.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-linkdupes-x86-64", "name": "linkdupes", "versionInfo": "0.7.3-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/linkdupes-0.7.3-3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND MIT AND Unicode-DFS-2016 AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND (MIT OR Zlib OR Apache-2.0) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: e839cebae2f671496325846256147325"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/linkdupes@0.7.3-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lua-libs-x86-64", "name": "lua-libs", "versionInfo": "5.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/lua-libs-5.5.1-2.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 4d1425525334d76079fe029d8f56b187"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lua-libs@5.5.1-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lua-srpm-macros-x86-64", "name": "lua-srpm-macros", "versionInfo": "1-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/lua-srpm-macros-1-18.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 68293f00751e1bc423b0bb2ac4e21221"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lua-srpm-macros@1-18.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lz4-libs-x86-64", "name": "lz4-libs", "versionInfo": "1.10.0-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/lz4-libs-1.10.0-5.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: f75d082f9eb3ae2757600e466a1d67e8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lz4-libs@1.10.0-5.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-make-x86-64", "name": "make", "versionInfo": "1:4.4.1-13.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/m/make-4.4.1-13.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND GFDL-1.3-or-later AND FSFULLR", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 92552a7aafadab8f8658b13554c85a7b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/make@4.4.1-13.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-meson-srpm-macros-x86-64", "name": "meson-srpm-macros", "versionInfo": "1.12.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/m/meson-srpm-macros-1.12.1-2.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 7617c98560a327b943961c400248f04b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/meson-srpm-macros@1.12.1-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-mpdecimal-x86-64", "name": "mpdecimal", "versionInfo": "4.0.1-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/m/mpdecimal-4.0.1-4.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 170c2028b47e6372d7f4a490d77e9578"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/mpdecimal@4.0.1-4.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-mpfr-x86-64", "name": "mpfr", "versionInfo": "4.2.2-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/m/mpfr-4.2.2-4.hum1.x86_64.rpm", "licenseDeclared": "LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 9b7d4b17e85c5c2a31eb4ff1071f1f11"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/mpfr@4.2.2-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ncurses-base-x86-64", "name": "ncurses-base", "versionInfo": "6.6-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/ncurses-base-6.6-3.1.hum1.noarch.rpm", "licenseDeclared": "MIT-open-group", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: a90d36a4f9603dffe4896cbc1c4c42c0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ncurses-base@6.6-3.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ncurses-libs-x86-64", "name": "ncurses-libs", "versionInfo": "6.6-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/ncurses-libs-6.6-3.1.hum1.x86_64.rpm", "licenseDeclared": "MIT-open-group", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 50f19d0d5fce318dd61f3bf284a61eb8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ncurses-libs@6.6-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-nettle-x86-64", "name": "nettle", "versionInfo": "4.0-5.5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/nettle-4.0-5.5.hum1.x86_64.rpm", "licenseDeclared": "LGPL-3.0-or-later OR GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 2732e0a3741ef414c34b156cda9d082b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/nettle@4.0-5.5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ngtcp2-crypto-ossl-x86-64", "name": "ngtcp2-crypto-ossl", "versionInfo": "1.22.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/ngtcp2-crypto-ossl-1.22.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: de381ae81e60f4844b4152a563a7edf1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ngtcp2-crypto-ossl@1.22.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ngtcp2-x86-64", "name": "ngtcp2", "versionInfo": "1.22.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/ngtcp2-1.22.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 83e5fdfe2265869feaadd36c14dd724c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ngtcp2@1.22.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-npth-x86-64", "name": "npth", "versionInfo": "1.8-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/npth-1.8-5.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 960ca5a1290fd8277e709962817f2d9b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/npth@1.8-5.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ocaml-srpm-macros-x86-64", "name": "ocaml-srpm-macros", "versionInfo": "11-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/ocaml-srpm-macros-11-4.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 6d563b597c552c5ce842bdd83b6d8dd1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ocaml-srpm-macros@11-4.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openblas-srpm-macros-x86-64", "name": "openblas-srpm-macros", "versionInfo": "2-23.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/openblas-srpm-macros-2-23.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: bf3a7ebbd05d3c09e9712e957b99d3b5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openblas-srpm-macros@2-23.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openldap-x86-64", "name": "openldap", "versionInfo": "2.6.15-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/openldap-2.6.15-1.1.hum1.x86_64.rpm", "licenseDeclared": "OLDAP-2.8", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 06f2c8cbb7e975fd13c4755c695ddeca"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openldap@2.6.15-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssl-fips-provider-upstream-x86-64", "name": "openssl-fips-provider-upstream", "versionInfo": "1:3.5.9-0.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/openssl-fips-provider-upstream-3.5.9-0.3.hum1.x86_64.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: f4f22195d0dd6fc38849c184a87fa7da"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssl-fips-provider-upstream@3.5.9-0.3.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssl-libs-x86-64", "name": "openssl-libs", "versionInfo": "1:3.5.9-0.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/openssl-libs-3.5.9-0.3.hum1.x86_64.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: ff278afa03fb60f6e5f5f40eee7aa06a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssl-libs@3.5.9-0.3.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-p11-kit-trust-x86-64", "name": "p11-kit-trust", "versionInfo": "0.26.5-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/p11-kit-trust-0.26.5-1.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 8de88a36ce4be4422ccf3d5985f6ed5f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/p11-kit-trust@0.26.5-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-p11-kit-x86-64", "name": "p11-kit", "versionInfo": "0.26.5-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/p11-kit-0.26.5-1.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 7769729a33beed05c5fe3b491ad9c342"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/p11-kit@0.26.5-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-package-notes-srpm-macros-x86-64", "name": "package-notes-srpm-macros", "versionInfo": "0.20-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/package-notes-srpm-macros-0.20-2.hum1.noarch.rpm", "licenseDeclared": "0BSD", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 4f6f48e6009eb2455ec194f477f9b058"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/package-notes-srpm-macros@0.20-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pam-libs-x86-64", "name": "pam-libs", "versionInfo": "1.7.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pam-libs-1.7.2-4.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 45d84f782c6e8ec75d9327ceb3697eac"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pam-libs@1.7.2-4.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-patch-x86-64", "name": "patch", "versionInfo": "2.8-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/patch-2.8-6.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 0779b5a6f549d6a7b457a6c82714069d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/patch@2.8-6.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-syntax-x86-64", "name": "pcre2-syntax", "versionInfo": "10.49-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pcre2-syntax-10.49-0.2.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 5892ce77122ec3ecfec34fe8679d2737"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2-syntax@10.49-0.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-x86-64", "name": "pcre2", "versionInfo": "10.49-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pcre2-10.49-0.2.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: f04405508213c03b1dbc3a06b70e927f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2@10.49-0.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-perl-srpm-macros-x86-64", "name": "perl-srpm-macros", "versionInfo": "1-65.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/perl-srpm-macros-1-65.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 0f8b16c4e63430bcff87cb49fa941740"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/perl-srpm-macros@1-65.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-m4-x86-64", "name": "pkgconf-m4", "versionInfo": "2.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pkgconf-m4-2.5.1-2.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later WITH Autoconf-exception-generic", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: e013238a36bb9fbc1d2ca514dddd4ca8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf-m4@2.5.1-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-pkg-config-x86-64", "name": "pkgconf-pkg-config", "versionInfo": "2.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pkgconf-pkg-config-2.5.1-2.hum1.x86_64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: a635242970269a96004c1698d505cbee"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf-pkg-config@2.5.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-x86-64", "name": "pkgconf", "versionInfo": "2.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pkgconf-2.5.1-2.hum1.x86_64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 5e1ba23c3274edeebb8a40e9f93deded"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf@2.5.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-policycoreutils-x86-64", "name": "policycoreutils", "versionInfo": "3.11-2.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/policycoreutils-3.11-2.2.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: bf26428f065424fee3e871b1ca1dfb69"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/policycoreutils@3.11-2.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-popt-x86-64", "name": "popt", "versionInfo": "1.19-11.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/popt-1.19-11.2.hum1.x86_64.rpm", "licenseDeclared": "MIT AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: c73e021a5dd1ebcd22f10bb597c28a0f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/popt@1.19-11.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-publicsuffix-list-dafsa-x86-64", "name": "publicsuffix-list-dafsa", "versionInfo": "20260624-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/publicsuffix-list-dafsa-20260624-2.1.hum1.noarch.rpm", "licenseDeclared": "MPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 258b22e06326223e99678d8138bba57d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/publicsuffix-list-dafsa@20260624-2.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pyproject-srpm-macros-x86-64", "name": "pyproject-srpm-macros", "versionInfo": "1.23.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pyproject-srpm-macros-1.23.2-1.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: e82edc55e5be2f520af44c2b0337e92a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pyproject-srpm-macros@1.23.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python-pip-wheel-x86-64", "name": "python-pip-wheel", "versionInfo": "26.2-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/python-pip-wheel-26.2-0.2.hum1.noarch.rpm", "licenseDeclared": "MIT AND Python-2.0.1 AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MPL-2.0 AND (Apache-2.0 OR BSD-2-Clause)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 30b1136e6baf2dc70c7e01a45cf96050"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python-pip-wheel@26.2-0.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python-srpm-macros-x86-64", "name": "python-srpm-macros", "versionInfo": "3.14-12.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/python-srpm-macros-3.14-12.2.hum1.noarch.rpm", "licenseDeclared": "MIT AND PSF-2.0 AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 618d0c006548a702f22df8ec49dca3a5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python-srpm-macros@3.14-12.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-boolean.py-x86-64", "name": "python3-boolean.py", "versionInfo": "5.0-10.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/p/python3-boolean.py-5.0-10.fc44.noarch.rpm", "licenseDeclared": "NOASSERTION", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: b7af00dcc3668fd56d3b09f1f1b171a9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-boolean.py@5.0-10.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-libs-x86-64", "name": "python3-libs", "versionInfo": "3.14.8-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/python3-libs-3.14.8-1.1.hum1.x86_64.rpm", "licenseDeclared": "Python-2.0.1 AND MIT AND BSD-3-Clause AND MIT-CMU AND HPND-SMC AND BSD-2-Clause AND dtoa AND Unicode-3.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: af65a70be9a4388459abf914c4d6d866"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-libs@3.14.8-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-license-expression-x86-64", "name": "python3-license-expression", "versionInfo": "30.4.4-4.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/p/python3-license-expression-30.4.4-4.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 009ffab3cc792b96ce398d6c97aa5a0a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-license-expression@30.4.4-4.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-x86-64", "name": "python3", "versionInfo": "3.14.8-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/python3-3.14.8-1.1.hum1.x86_64.rpm", "licenseDeclared": "Python-2.0.1", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 372e28a8b7ffa76c497a0c91cc712157"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3@3.14.8-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-qt5-srpm-macros-x86-64", "name": "qt5-srpm-macros", "versionInfo": "5.15.18-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/q/qt5-srpm-macros-5.15.18-3.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 38abd8c7f1184339bff7ddf1044f1b7d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/qt5-srpm-macros@5.15.18-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-qt6-srpm-macros-x86-64", "name": "qt6-srpm-macros", "versionInfo": "6.11.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/q/qt6-srpm-macros-6.11.2-1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 8684a2b8276c41d1e69ef971a6b044b3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/qt6-srpm-macros@6.11.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-readline-x86-64", "name": "readline", "versionInfo": "8.3-7.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/readline-8.3-7.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 6d5f55d88397da5ff5d6d44c166e44ad"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/readline@8.3-7.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-redhat-rpm-config-x86-64", "name": "redhat-rpm-config", "versionInfo": "345-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/redhat-rpm-config-345-4.hum1.noarch.rpm", "licenseDeclared": "GPL-1.0-or-later AND GPL-2.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 9e9b9de801d40d8b16d77058da82cde9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/redhat-rpm-config@345-4.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-build-libs-x86-64", "name": "rpm-build-libs", "versionInfo": "6.1.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-build-libs-6.1.0-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: fddb091d7cd8470b508da778ce95427f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-build-libs@6.1.0-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-build-x86-64", "name": "rpm-build", "versionInfo": "6.1.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-build-6.1.0-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: c4fa8cb3786e678ca25a978a3134d123"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-build@6.1.0-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-libs-x86-64", "name": "rpm-libs", "versionInfo": "6.1.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-libs-6.1.0-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: f303e3be66d9d2077796772ec9575047"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-libs@6.1.0-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-plugin-selinux-x86-64", "name": "rpm-plugin-selinux", "versionInfo": "6.1.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-plugin-selinux-6.1.0-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: e26c11950929fc940d83b9b50c024f88"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-plugin-selinux@6.1.0-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-sequoia-x86-64", "name": "rpm-sequoia", "versionInfo": "1.10.1.1-1.5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-sequoia-1.10.1.1-1.5.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later AND Apache-2.0 AND BSL-1.0 AND MIT AND Unicode-DFS-2016 AND (Apache-2.0 OR MIT) AND (MIT OR Apache-2.0 OR Zlib) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 5cf9f6fd1ce035bcea5b932aa655b4e9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-sequoia@1.10.1.1-1.5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-sign-libs-x86-64", "name": "rpm-sign-libs", "versionInfo": "6.1.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-sign-libs-6.1.0-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 8309de3ff4081bc4d5b5741c3e42d61a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-sign-libs@6.1.0-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-x86-64", "name": "rpm", "versionInfo": "6.1.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-6.1.0-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 19703e1b1064f0405b5361d3ea90ca90"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm@6.1.0-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rust-srpm-macros-x86-64", "name": "rust-srpm-macros", "versionInfo": "28.5-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rust-srpm-macros-28.5-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 606a7a2166723ba0e3515fa8244596dc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rust-srpm-macros@28.5-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sed-x86-64", "name": "sed", "versionInfo": "4.10-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/sed-4.10-2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: b7e0ef816a5a8405eb5ecbeead8b8387"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sed@4.10-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-selinux-policy-targeted-x86-64", "name": "selinux-policy-targeted", "versionInfo": "45.21-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/selinux-policy-targeted-45.21-1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: afd3a0e6066718b6633918ff5031c1ce"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/selinux-policy-targeted@45.21-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-selinux-policy-x86-64", "name": "selinux-policy", "versionInfo": "45.21-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/selinux-policy-45.21-1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 910958d9c5c1913d447a1e64fb0ad0b6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/selinux-policy@45.21-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-setup-x86-64", "name": "setup", "versionInfo": "2.15.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/setup-2.15.1-2.1.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 7306efa4649c49f3d249269ae6781e58"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/setup@2.15.1-2.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-shadow-utils-x86-64", "name": "shadow-utils", "versionInfo": "2:4.20.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/shadow-utils-4.20.0-1.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: a40baacbe274a1fd7467dafc995fc06f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/shadow-utils@4.20.0-1.1.hum1?arch=x86_64&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sqlite-libs-x86-64", "name": "sqlite-libs", "versionInfo": "3.53.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/sqlite-libs-3.53.4-1.1.hum1.x86_64.rpm", "licenseDeclared": "blessing", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 3891e56f4c01058666109d9b6857a06d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sqlite-libs@3.53.4-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-libs-x86-64", "name": "systemd-libs", "versionInfo": "261.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/systemd-libs-261.2-1.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 63d4edd2cfd94aca76095674502f3a39"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-libs@261.2-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-standalone-sysusers-x86-64", "name": "systemd-standalone-sysusers", "versionInfo": "261.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/systemd-standalone-sysusers-261.2-1.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 0c32ee07c90e4e4e482a2e2ba7fc9909"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-standalone-sysusers@261.2-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tar-x86-64", "name": "tar", "versionInfo": "2:1.35-10.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/t/tar-1.35-10.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 2d9125f5ec73e194627aa82d115edf46"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tar@1.35-10.hum1?arch=x86_64&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tpm2-tss-x86-64", "name": "tpm2-tss", "versionInfo": "4.2.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/t/tpm2-tss-4.2.0-1.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 945a1dbae0e23df3e0c036c7be3c6ed9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tpm2-tss@4.2.0-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tree-sitter-srpm-macros-x86-64", "name": "tree-sitter-srpm-macros", "versionInfo": "0.4.6-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/t/tree-sitter-srpm-macros-0.4.6-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: f65af17df28df341ec383338fcc47481"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tree-sitter-srpm-macros@0.4.6-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tzdata-x86-64", "name": "tzdata", "versionInfo": "2026e-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/t/tzdata-2026e-1.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain AND (GPL-2.0-only WITH ClassPath-exception-2.0)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: a1336045dee9a14e5ecb98f2e75ca023"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tzdata@2026e-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-unzip-x86-64", "name": "unzip", "versionInfo": "6.0-71.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/u/unzip-6.0-71.hum1.x86_64.rpm", "licenseDeclared": "Info-ZIP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: bfc5ab20d40fbc285e5344ad03457851"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/unzip@6.0-71.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-util-linux-core-x86-64", "name": "util-linux-core", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/u/util-linux-core-2.42.4-2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 65e6bb5ce193e259db92b1da1458a9f7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/util-linux-core@2.42.4-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-util-linux-x86-64", "name": "util-linux", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/u/util-linux-2.42.4-2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-1.0-or-later AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 9e691eac5b01ac766ab95d8f44e0f34c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/util-linux@2.42.4-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-which-x86-64", "name": "which", "versionInfo": "2.25-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/w/which-2.25-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 593fc46299e5b9f11865ad0a81def554"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/which@2.25-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xxhash-libs-x86-64", "name": "xxhash-libs", "versionInfo": "0.8.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/x/xxhash-libs-0.8.4-1.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 3d91a1be44d587bb71ff080ac2b8c588"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xxhash-libs@0.8.4-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xz-libs-x86-64", "name": "xz-libs", "versionInfo": "1:5.8.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/x/xz-libs-5.8.4-1.1.hum1.x86_64.rpm", "licenseDeclared": "0BSD", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: f53b834106c4229e7ba3483e9bafb67f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xz-libs@5.8.4-1.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xz-x86-64", "name": "xz", "versionInfo": "1:5.8.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/x/xz-5.8.4-1.1.hum1.x86_64.rpm", "licenseDeclared": "0BSD AND GPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: e2e7b3e9e3c31d3d1fda36dd4704d919"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xz@5.8.4-1.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zig-srpm-macros-x86-64", "name": "zig-srpm-macros", "versionInfo": "1-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/z/zig-srpm-macros-1-9.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 0c226eb1fa4d5fc3d272055b6397b077"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zig-srpm-macros@1-9.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zip-x86-64", "name": "zip", "versionInfo": "3.0-45.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/z/zip-3.0-45.1.hum1.x86_64.rpm", "licenseDeclared": "Info-ZIP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: c96ff9d3553ddb968b19aad8fff223e9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zip@3.0-45.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zlib-ng-compat-x86-64", "name": "zlib-ng-compat", "versionInfo": "2.3.3-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/z/zlib-ng-compat-2.3.3-6.1.hum1.x86_64.rpm", "licenseDeclared": "Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: 6f0531e35b9ec4b90b2a3d2debc0c51e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zlib-ng-compat@2.3.3-6.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zstd-x86-64", "name": "zstd", "versionInfo": "1.5.7-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/z/zstd-1.5.7-6.2.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-08T23:09:34Z", "comment": "sigmd5: ea2450a029df76814e66045458cf3d03"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zstd@1.5.7-6.2.hum1?arch=x86_64"}]}, {"name": "./api/v2", "SPDXID": "SPDXRef-Package-go-module-.-api-v2-2c1dcafbb37712cd", "versionInfo": "UNKNOWN", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:api:v2:*:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/./api/v2"}]}, {"name": "ariga.io/atlas", "SPDXID": "SPDXRef-Package-go-module-ariga.io-atlas-a98ee130f5c49356", "versionInfo": "v0.36.2-0.20250730182955-2c6300d0a3e1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/ariga.io/atlas@v0.36.2-0.20250730182955-2c6300d0a3e1"}]}, {"name": "cloud.google.com/go/auth", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-auth-2efdf6dc19233759", "versionInfo": "v0.24.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:auth:v0.24.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/auth@v0.24.0"}]}, {"name": "cloud.google.com/go/auth/oauth2adapt", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-7459d807006035e0", "versionInfo": "v0.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:auth\\/oauth2adapt:v0.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/auth@v0.3.0#oauth2adapt"}]}, {"name": "cloud.google.com/go/compute/metadata", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-fa33b64249861aff", "versionInfo": "v0.10.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:compute\\/metadata:v0.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/compute@v0.10.0#metadata"}]}, {"name": "dario.cat/mergo", "SPDXID": "SPDXRef-Package-go-module-dario.cat-mergo-4fc9b3d9d87a12b3", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/dario.cat/mergo@v1.0.1"}]}, {"name": "dex", "SPDXID": "SPDXRef-Package-rpm-dex-3631dd46fe02fdaa", "versionInfo": "2.46.0-0.1.hum1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from RPM DB: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dex:dex:2.46.0-0.1.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/hummingbird/dex@2.46.0-0.1.hum1?distro=hummingbird-1"}]}, {"name": "entgo.io/ent", "SPDXID": "SPDXRef-Package-go-module-entgo.io-ent-e56fd5027c62dd5f", "versionInfo": "v0.14.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/entgo.io/ent@v0.14.6"}]}, {"name": "filippo.io/edwards25519", "SPDXID": "SPDXRef-Package-go-module-filippo.io-edwards25519-9c4679052caf00c9", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/filippo.io/edwards25519@v1.2.0"}]}, {"name": "github.com/AppsFlyer/go-sundheit", "SPDXID": "SPDXRef-Package-go-module-github.com-AppsFlyer-go-sundheit-582521e74166ccdb", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:AppsFlyer:go-sundheit:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:AppsFlyer:go_sundheit:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/AppsFlyer/go-sundheit@v0.6.0"}]}, {"name": "github.com/Azure/go-ntlmssp", "SPDXID": "SPDXRef-Package-go-module-github.com-Azure-go-ntlmssp-8d0c748a5b0c774a", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Azure:go-ntlmssp:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Azure:go_ntlmssp:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Azure/go-ntlmssp@v0.1.1"}]}, {"name": "github.com/Masterminds/goutils", "SPDXID": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-a50acbe0ade5b4af", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:goutils_project:goutils:v1.1.1:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Masterminds/goutils@v1.1.1"}]}, {"name": "github.com/Masterminds/semver", "SPDXID": "SPDXRef-Package-go-module-github.com-Masterminds-semver-a57a770d58f319b0", "versionInfo": "v1.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Masterminds:semver:v1.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Masterminds/semver@v1.5.0"}]}, {"name": "github.com/Masterminds/semver/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-6caa7cb1ffac1c68", "versionInfo": "v3.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Masterminds:semver\\/v3:v3.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Masterminds/semver@v3.3.0#v3"}]}, {"name": "github.com/Masterminds/sprig/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-5a7d7da6426999fe", "versionInfo": "v3.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Masterminds:sprig\\/v3:v3.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Masterminds/sprig@v3.3.0#v3"}]}, {"name": "github.com/agext/levenshtein", "SPDXID": "SPDXRef-Package-go-module-github.com-agext-levenshtein-696e34726728f3e4", "versionInfo": "v1.2.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:agext:levenshtein:v1.2.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/agext/levenshtein@v1.2.3"}]}, {"name": "github.com/apparentlymart/go-textseg/v15", "SPDXID": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-a789d9bbbd682e1a", "versionInfo": "v15.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apparentlymart:go-textseg\\/v15:v15.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apparentlymart:go_textseg\\/v15:v15.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/apparentlymart/go-textseg@v15.0.0#v15"}]}, {"name": "github.com/beevik/etree", "SPDXID": "SPDXRef-Package-go-module-github.com-beevik-etree-5acbcf0c9285f7da", "versionInfo": "v1.8.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:beevik:etree:v1.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/beevik/etree@v1.8.1"}]}, {"name": "github.com/beorn7/perks", "SPDXID": "SPDXRef-Package-go-module-github.com-beorn7-perks-b66b57fcca5680b7", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:beorn7:perks:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/beorn7/perks@v1.0.1"}]}, {"name": "github.com/bmatcuk/doublestar", "SPDXID": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-48d9afc9e41e1807", "versionInfo": "v1.3.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bmatcuk:doublestar:v1.3.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bmatcuk/doublestar@v1.3.4"}]}, {"name": "github.com/boombuler/barcode", "SPDXID": "SPDXRef-Package-go-module-github.com-boombuler-barcode-564fe46d1b2d91ae", "versionInfo": "v1.0.1-0.20190219062509-6c824513bacc", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:boombuler:barcode:v1.0.1-0.20190219062509-6c824513bacc:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/boombuler/barcode@v1.0.1-0.20190219062509-6c824513bacc"}]}, {"name": "github.com/cenkalti/backoff/v5", "SPDXID": "SPDXRef-Package-go-module-github.com-cenkalti-backoff-v5-2d2cb27716ec71ee", "versionInfo": "v5.0.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cenkalti:backoff\\/v5:v5.0.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cenkalti/backoff@v5.0.3#v5"}]}, {"name": "github.com/cespare/xxhash/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-0a6756cb9ec2e2b3", "versionInfo": "v2.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cespare/xxhash@v2.3.0#v2"}]}, {"name": "github.com/coreos/go-oidc/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-coreos-go-oidc-v3-f74fc19366074026", "versionInfo": "v3.21.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go-oidc\\/v3:v3.21.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go_oidc\\/v3:v3.21.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/coreos/go-oidc@v3.21.0#v3"}]}, {"name": "github.com/coreos/go-semver", "SPDXID": "SPDXRef-Package-go-module-github.com-coreos-go-semver-20bd4e9009b9ea17", "versionInfo": "v0.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go-semver:v0.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go_semver:v0.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/coreos/go-semver@v0.3.1"}]}, {"name": "github.com/coreos/go-systemd/v22", "SPDXID": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-v22-45345e6247818704", "versionInfo": "v22.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go-systemd\\/v22:v22.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go_systemd\\/v22:v22.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/coreos/go-systemd@v22.7.0#v22"}]}, {"name": "github.com/dexidp/dex", "SPDXID": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "versionInfo": "v2.46.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dexidp:dex:v2.46.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/dexidp/dex@v2.46.0"}]}, {"name": "github.com/felixge/httpsnoop", "SPDXID": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-d27253d4fd7719e4", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:felixge:httpsnoop:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/felixge/httpsnoop@v1.1.0"}]}, {"name": "github.com/fsnotify/fsnotify", "SPDXID": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-7aaa33dc851fb3c3", "versionInfo": "v1.10.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fsnotify:fsnotify:v1.10.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fsnotify/fsnotify@v1.10.1"}]}, {"name": "github.com/fxamacker/cbor/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-fxamacker-cbor-v2-112c8dcc5aa1df98", "versionInfo": "v2.9.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fxamacker:cbor\\/v2:v2.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fxamacker/cbor@v2.9.4#v2"}]}, {"name": "github.com/ghodss/yaml", "SPDXID": "SPDXRef-Package-go-module-github.com-ghodss-yaml-734e5f4c0b7b7bac", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ghodss:yaml:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/ghodss/yaml@v1.0.0"}]}, {"name": "github.com/go-asn1-ber/asn1-ber", "SPDXID": "SPDXRef-Package-go-module-github.com-go-asn1-ber-asn1-ber-ca507d9b14e012ac", "versionInfo": "v1.5.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-asn1-ber:asn1-ber:v1.5.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-asn1-ber:asn1_ber:v1.5.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_asn1_ber:asn1-ber:v1.5.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_asn1_ber:asn1_ber:v1.5.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-asn1:asn1-ber:v1.5.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-asn1:asn1_ber:v1.5.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_asn1:asn1-ber:v1.5.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_asn1:asn1_ber:v1.5.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:asn1-ber:v1.5.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:asn1_ber:v1.5.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-asn1-ber/asn1-ber@v1.5.8"}]}, {"name": "github.com/go-jose/go-jose/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-943019e47c575fba", "versionInfo": "v4.1.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go-jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go_jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go-jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go_jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-jose/go-jose@v4.1.5#v4"}]}, {"name": "github.com/go-ldap/ldap/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-go-ldap-ldap-v3-5bdbdb2758926af3", "versionInfo": "v3.4.14", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-ldap:ldap\\/v3:v3.4.14:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_ldap:ldap\\/v3:v3.4.14:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:ldap\\/v3:v3.4.14:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-ldap/ldap@v3.4.14#v3"}]}, {"name": "github.com/go-logr/logr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-logr-9b0c1e50b3e2c92c", "versionInfo": "v1.4.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:logr:v1.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:logr:v1.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:logr:v1.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/logr@v1.4.4"}]}, {"name": "github.com/go-logr/stdr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-stdr-edf2d0316bb517b3", "versionInfo": "v1.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/stdr@v1.2.2"}]}, {"name": "github.com/go-openapi/inflect", "SPDXID": "SPDXRef-Package-go-module-github.com-go-openapi-inflect-89172f7047a3d50e", "versionInfo": "v0.19.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-openapi:inflect:v0.19.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_openapi:inflect:v0.19.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:inflect:v0.19.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-openapi/inflect@v0.19.0"}]}, {"name": "github.com/go-sql-driver/mysql", "SPDXID": "SPDXRef-Package-go-module-github.com-go-sql-driver-mysql-2468534af4b0dba8", "versionInfo": "v1.10.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-sql-driver:mysql:v1.10.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_sql_driver:mysql:v1.10.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-sql:mysql:v1.10.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_sql:mysql:v1.10.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:mysql:v1.10.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-sql-driver/mysql@v1.10.1"}]}, {"name": "github.com/go-viper/mapstructure/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-c26ed6ad3238064c", "versionInfo": "v2.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-viper/mapstructure@v2.5.0#v2"}]}, {"name": "github.com/go-webauthn/webauthn", "SPDXID": "SPDXRef-Package-go-module-github.com-go-webauthn-webauthn-5bf7840165409607", "versionInfo": "v0.18.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-webauthn:webauthn:v0.18.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_webauthn:webauthn:v0.18.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:webauthn:v0.18.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-webauthn/webauthn@v0.18.2"}]}, {"name": "github.com/go-webauthn/x", "SPDXID": "SPDXRef-Package-go-module-github.com-go-webauthn-x-beca76a3406a5caa", "versionInfo": "v0.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-webauthn:x:v0.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_webauthn:x:v0.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:x:v0.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-webauthn/x@v0.3.1"}]}, {"name": "github.com/golang-jwt/jwt/v5", "SPDXID": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-c0ddb1c757a015a9", "versionInfo": "v5.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang-jwt:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang_jwt:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/golang-jwt/jwt@v5.3.1#v5"}]}, {"name": "github.com/golang/protobuf", "SPDXID": "SPDXRef-Package-go-module-github.com-golang-protobuf-af26c8f7bebbfdae", "versionInfo": "v1.5.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:protobuf:v1.5.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/golang/protobuf@v1.5.4"}]}, {"name": "github.com/google/go-cmp", "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-cmp-5a77a7e983801456", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go-cmp:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go_cmp:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/go-cmp@v0.7.0"}]}, {"name": "github.com/google/go-tpm", "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-tpm-11f4b9e4b65ab49c", "versionInfo": "v0.9.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go-tpm:v0.9.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go_tpm:v0.9.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/go-tpm@v0.9.8"}]}, {"name": "github.com/google/s2a-go", "SPDXID": "SPDXRef-Package-go-module-github.com-google-s2a-go-4957470f72468e63", "versionInfo": "v0.1.10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:s2a-go:v0.1.10:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:s2a_go:v0.1.10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/s2a-go@v0.1.10"}]}, {"name": "github.com/google/uuid", "SPDXID": "SPDXRef-Package-go-module-github.com-google-uuid-384727c18a3a1324", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/uuid@v1.6.0"}]}, {"name": "github.com/googleapis/enterprise-certificate-proxy", "SPDXID": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-121fef0ed48d27a7", "versionInfo": "v0.3.22", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:enterprise-certificate-proxy:v0.3.22:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:enterprise_certificate_proxy:v0.3.22:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.22"}]}, {"name": "github.com/googleapis/gax-go/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-8da489be570b1e2c", "versionInfo": "v2.26.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:gax-go\\/v2:v2.26.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:gax_go\\/v2:v2.26.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/googleapis/gax-go@v2.26.2#v2"}]}, {"name": "github.com/gorilla/handlers", "SPDXID": "SPDXRef-Package-go-module-github.com-gorilla-handlers-6faecad3a871d25e", "versionInfo": "v1.5.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gorilla:handlers:v1.5.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gorilla/handlers@v1.5.2"}]}, {"name": "github.com/gorilla/mux", "SPDXID": "SPDXRef-Package-go-module-github.com-gorilla-mux-220ad65fb54d0957", "versionInfo": "v1.8.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gorilla:mux:v1.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gorilla/mux@v1.8.1"}]}, {"name": "github.com/grpc-ecosystem/go-grpc-prometheus", "SPDXID": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-go-grpc-prometheus-5fa751c7ebab9fc8", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc-ecosystem:go-grpc-prometheus:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc-ecosystem:go_grpc_prometheus:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc_ecosystem:go-grpc-prometheus:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc_ecosystem:go_grpc_prometheus:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc:go-grpc-prometheus:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc:go_grpc_prometheus:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/grpc-ecosystem/go-grpc-prometheus@v1.2.0"}]}, {"name": "github.com/grpc-ecosystem/grpc-gateway/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-grpc-gateway-v2-afe7ac103e8d4ecd", "versionInfo": "v2.29.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc-ecosystem:grpc-gateway\\/v2:v2.29.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc-ecosystem:grpc_gateway\\/v2:v2.29.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc_ecosystem:grpc-gateway\\/v2:v2.29.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc_ecosystem:grpc_gateway\\/v2:v2.29.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc:grpc-gateway\\/v2:v2.29.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc:grpc_gateway\\/v2:v2.29.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway@v2.29.0#v2"}]}, {"name": "github.com/hashicorp/errwrap", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-fd51fad5e0b090d6", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:errwrap:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0"}]}, {"name": "github.com/hashicorp/go-cleanhttp", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-ad92008a67236aed", "versionInfo": "v0.5.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-cleanhttp:v0.5.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_cleanhttp:v0.5.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2"}]}, {"name": "github.com/hashicorp/go-multierror", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-e0e209125dcaeed2", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-multierror:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_multierror:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1"}]}, {"name": "github.com/hashicorp/go-retryablehttp", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-retryablehttp-e0e623ea3aef7607", "versionInfo": "v0.7.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:retryablehttp:v0.7.8:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8"}]}, {"name": "github.com/hashicorp/go-secure-stdlib/parseutil", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-secure-stdlib-parseutil-ad8456c4c3cf1a76", "versionInfo": "v0.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-secure-stdlib\\/parseutil:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_secure_stdlib\\/parseutil:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-secure-stdlib@v0.2.0#parseutil"}]}, {"name": "github.com/hashicorp/go-secure-stdlib/strutil", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-secure-stdlib-strutil-95341417fe70325c", "versionInfo": "v0.1.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-secure-stdlib\\/strutil:v0.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_secure_stdlib\\/strutil:v0.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-secure-stdlib@v0.1.2#strutil"}]}, {"name": "github.com/hashicorp/go-sockaddr", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-sockaddr-b90e7112cd4a5127", "versionInfo": "v1.0.7", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-sockaddr:v1.0.7:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_sockaddr:v1.0.7:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-sockaddr@v1.0.7"}]}, {"name": "github.com/hashicorp/go-uuid", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-uuid-6643792428ebab68", "versionInfo": "v1.0.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-uuid:v1.0.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_uuid:v1.0.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-uuid@v1.0.3"}]}, {"name": "github.com/hashicorp/hcl", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-8418983d4499589d", "versionInfo": "v1.0.1-vault-7", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:hcl:v1.0.1-vault-7:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/hcl@v1.0.1-vault-7"}]}, {"name": "github.com/hashicorp/hcl/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-ed0de39ed4c5a960", "versionInfo": "v2.18.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:hcl\\/v2:v2.18.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/hcl@v2.18.1#v2"}]}, {"name": "github.com/huandu/xstrings", "SPDXID": "SPDXRef-Package-go-module-github.com-huandu-xstrings-b2a5ddf0f545b7c1", "versionInfo": "v1.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:huandu:xstrings:v1.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/huandu/xstrings@v1.5.0"}]}, {"name": "github.com/jcmturner/aescts/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-jcmturner-aescts-v2-e78bc2a9570d6f17", "versionInfo": "v2.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jcmturner:aescts\\/v2:v2.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jcmturner/aescts@v2.0.0#v2"}]}, {"name": "github.com/jcmturner/dnsutils/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-jcmturner-dnsutils-v2-f23df538048210fd", "versionInfo": "v2.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jcmturner:dnsutils\\/v2:v2.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jcmturner/dnsutils@v2.0.0#v2"}]}, {"name": "github.com/jcmturner/gofork", "SPDXID": "SPDXRef-Package-go-module-github.com-jcmturner-gofork-bc1fa81ee4f4d126", "versionInfo": "v1.7.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jcmturner:gofork:v1.7.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jcmturner/gofork@v1.7.6"}]}, {"name": "github.com/jcmturner/goidentity/v6", "SPDXID": "SPDXRef-Package-go-module-github.com-jcmturner-goidentity-v6-737cecefa7f55c16", "versionInfo": "v6.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jcmturner:goidentity\\/v6:v6.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jcmturner/goidentity@v6.0.1#v6"}]}, {"name": "github.com/jcmturner/gokrb5/v8", "SPDXID": "SPDXRef-Package-go-module-github.com-jcmturner-gokrb5-v8-4d48e17db2d8bdc8", "versionInfo": "v8.4.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jcmturner:gokrb5\\/v8:v8.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jcmturner/gokrb5@v8.4.4#v8"}]}, {"name": "github.com/jcmturner/rpc/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-jcmturner-rpc-v2-72abd17a9bd23aea", "versionInfo": "v2.0.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jcmturner:rpc\\/v2:v2.0.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jcmturner/rpc@v2.0.3#v2"}]}, {"name": "github.com/jonboulle/clockwork", "SPDXID": "SPDXRef-Package-go-module-github.com-jonboulle-clockwork-79673d7d6f31a233", "versionInfo": "v0.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jonboulle:clockwork:v0.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jonboulle/clockwork@v0.5.0"}]}, {"name": "github.com/lib/pq", "SPDXID": "SPDXRef-Package-go-module-github.com-lib-pq-9efb87cc10b2719f", "versionInfo": "v1.12.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lib:pq:v1.12.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/lib/pq@v1.12.3"}]}, {"name": "github.com/mattermost/xml-roundtrip-validator", "SPDXID": "SPDXRef-Package-go-module-github.com-mattermost-xml-roundtrip-validator-86611180d3097734", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattermost:xml-roundtrip-validator:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattermost:xml_roundtrip_validator:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattermost/xml-roundtrip-validator@v0.1.0"}]}, {"name": "github.com/mattn/go-sqlite3", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-sqlite3-fb711fe054b828a8", "versionInfo": "v1.14.52", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-sqlite3:v1.14.52:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_sqlite3:v1.14.52:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-sqlite3@v1.14.52"}]}, {"name": "github.com/mitchellh/copystructure", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-3bc14171d483b119", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:copystructure:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/copystructure@v1.2.0"}]}, {"name": "github.com/mitchellh/go-wordwrap", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-d24f7d23a17992cf", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:go-wordwrap:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:go_wordwrap:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1"}]}, {"name": "github.com/mitchellh/mapstructure", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-mapstructure-0be713daa1161c9b", "versionInfo": "v1.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:mapstructure:v1.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/mapstructure@v1.5.0"}]}, {"name": "github.com/mitchellh/reflectwalk", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-6d52ba4da158e755", "versionInfo": "v1.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:reflectwalk:v1.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/reflectwalk@v1.0.2"}]}, {"name": "github.com/munnerz/goautoneg", "SPDXID": "SPDXRef-Package-go-module-github.com-munnerz-goautoneg-b9dfa0adbcb09ff7", "versionInfo": "v0.0.0-20191010083416-a7dc8b61c822", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:munnerz:goautoneg:v0.0.0-20191010083416-a7dc8b61c822:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822"}]}, {"name": "github.com/oklog/run", "SPDXID": "SPDXRef-Package-go-module-github.com-oklog-run-80a9a9bd310f4dbc", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oklog:run:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/oklog/run@v1.2.0"}]}, {"name": "github.com/openbao/openbao/api/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-openbao-openbao-api-v2-b15fd85395c236fd", "versionInfo": "v2.7.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:openbao:openbao\\/api\\/v2:v2.7.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/openbao/openbao@v2.7.1#api/v2"}]}, {"name": "github.com/philhofer/fwd", "SPDXID": "SPDXRef-Package-go-module-github.com-philhofer-fwd-a7bb2a71a771ecd1", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:philhofer:fwd:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/philhofer/fwd@v1.2.0"}]}, {"name": "github.com/pkg/errors", "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-errors-805deee25838bc13", "versionInfo": "v0.9.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pkg/errors@v0.9.1"}]}, {"name": "github.com/pquerna/otp", "SPDXID": "SPDXRef-Package-go-module-github.com-pquerna-otp-913be8f85e94beb1", "versionInfo": "v1.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pquerna:otp:v1.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pquerna/otp@v1.5.0"}]}, {"name": "github.com/prometheus/client_golang", "SPDXID": "SPDXRef-Package-go-module-github.com-prometheus-client-golang-e6c6299adca4badc", "versionInfo": "v1.24.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:client-golang:v1.24.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:client_golang:v1.24.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/prometheus/client_golang@v1.24.1"}]}, {"name": "github.com/prometheus/client_model", "SPDXID": "SPDXRef-Package-go-module-github.com-prometheus-client-model-00a4cb062feee677", "versionInfo": "v0.6.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:client-model:v0.6.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:client_model:v0.6.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/prometheus/client_model@v0.6.2"}]}, {"name": "github.com/prometheus/common", "SPDXID": "SPDXRef-Package-go-module-github.com-prometheus-common-3be4a4f5ed39e59a", "versionInfo": "v0.70.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:common:v0.70.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/prometheus/common@v0.70.1"}]}, {"name": "github.com/prometheus/procfs", "SPDXID": "SPDXRef-Package-go-module-github.com-prometheus-procfs-a0c72f75b3121b33", "versionInfo": "v0.21.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:procfs:v0.21.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/prometheus/procfs@v0.21.1"}]}, {"name": "github.com/russellhaering/goxmldsig", "SPDXID": "SPDXRef-Package-go-module-github.com-russellhaering-goxmldsig-0f47bc5e79a32e3b", "versionInfo": "v1.6.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:russellhaering:goxmldsig:v1.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/russellhaering/goxmldsig@v1.6.1"}]}, {"name": "github.com/ryanuber/go-glob", "SPDXID": "SPDXRef-Package-go-module-github.com-ryanuber-go-glob-e71d8196f17ee4a7", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ryanuber:go-glob:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ryanuber:go_glob:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/ryanuber/go-glob@v1.0.0"}]}, {"name": "github.com/shopspring/decimal", "SPDXID": "SPDXRef-Package-go-module-github.com-shopspring-decimal-c66802a249115f78", "versionInfo": "v1.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:shopspring:decimal:v1.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/shopspring/decimal@v1.4.0"}]}, {"name": "github.com/spf13/cast", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-cast-994ee05d78625e18", "versionInfo": "v1.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:cast:v1.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/cast@v1.7.0"}]}, {"name": "github.com/spf13/cobra", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-cobra-2f1b7f9f6dd72e1f", "versionInfo": "v1.10.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:cobra:v1.10.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/cobra@v1.10.2"}]}, {"name": "github.com/spf13/pflag", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-pflag-772707d6a1821117", "versionInfo": "v1.0.9", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:pflag:v1.0.9:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/pflag@v1.0.9"}]}, {"name": "github.com/tinylib/msgp", "SPDXID": "SPDXRef-Package-go-module-github.com-tinylib-msgp-a275e3d11a82359c", "versionInfo": "v1.6.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tinylib:msgp:v1.6.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/tinylib/msgp@v1.6.4"}]}, {"name": "github.com/x448/float16", "SPDXID": "SPDXRef-Package-go-module-github.com-x448-float16-0b2204cb9796a42b", "versionInfo": "v0.8.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:x448:float16:v0.8.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/x448/float16@v0.8.4"}]}, {"name": "github.com/zclconf/go-cty", "SPDXID": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-959368c1fb7bf140", "versionInfo": "v1.14.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zclconf:go-cty:v1.14.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zclconf:go_cty:v1.14.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/zclconf/go-cty@v1.14.4"}]}, {"name": "github.com/zclconf/go-cty-yaml", "SPDXID": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-yaml-1457c2798420112e", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zclconf:go-cty-yaml:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zclconf:go_cty_yaml:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/zclconf/go-cty-yaml@v1.1.0"}]}, {"name": "go.etcd.io/etcd/api/v3", "SPDXID": "SPDXRef-Package-go-module-go.etcd.io-etcd-api-v3-5e637c17362041f0", "versionInfo": "v3.7.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:etcd:api\\/v3:v3.7.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.etcd.io/etcd/api@v3.7.2#v3"}]}, {"name": "go.etcd.io/etcd/client/pkg/v3", "SPDXID": "SPDXRef-Package-go-module-go.etcd.io-etcd-client-pkg-v3-b61aeb81c7efd0eb", "versionInfo": "v3.7.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:etcd:client\\/pkg\\/v3:v3.7.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.etcd.io/etcd/client@v3.7.2#pkg/v3"}]}, {"name": "go.etcd.io/etcd/client/v3", "SPDXID": "SPDXRef-Package-go-module-go.etcd.io-etcd-client-v3-46a8d5678cff569b", "versionInfo": "v3.7.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:etcd:client\\/v3:v3.7.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.etcd.io/etcd/client@v3.7.2#v3"}]}, {"name": "go.opentelemetry.io/auto/sdk", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-bf84e29308c71473", "versionInfo": "v1.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:auto:sdk:v1.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1"}]}, {"name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-cb7909a476018297", "versionInfo": "v0.69.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/otelhttp:v0.69.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation@v0.69.0#net/http/otelhttp"}]}, {"name": "go.opentelemetry.io/otel", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-41e9fbfc57119363", "versionInfo": "v1.45.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel@v1.45.0"}]}, {"name": "go.opentelemetry.io/otel/metric", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-ff3f182fbd0cdb6c", "versionInfo": "v1.45.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:metric:v1.45.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/metric@v1.45.0"}]}, {"name": "go.opentelemetry.io/otel/trace", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-99370ed076b9216e", "versionInfo": "v1.45.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:trace:v1.45.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/trace@v1.45.0"}]}, {"name": "go.uber.org/multierr", "SPDXID": "SPDXRef-Package-go-module-go.uber.org-multierr-b168f633cba7c795", "versionInfo": "v1.11.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.uber.org/multierr@v1.11.0"}]}, {"name": "go.uber.org/zap", "SPDXID": "SPDXRef-Package-go-module-go.uber.org-zap-329815d4cf6e300c", "versionInfo": "v1.27.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.uber.org/zap@v1.27.1"}]}, {"name": "golang.org/x/crypto", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-crypto-cfde819df4c6b939", "versionInfo": "v0.57.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:ssh:v0.57.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/crypto@v0.57.0"}]}, {"name": "golang.org/x/exp", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-exp-dfe7eba61631b803", "versionInfo": "v0.0.0-20240823005443-9b4947da3948", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/exp:v0.0.0-20240823005443-9b4947da3948:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/exp@v0.0.0-20240823005443-9b4947da3948"}]}, {"name": "golang.org/x/mod", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-mod-60ee454464914a0a", "versionInfo": "v0.41.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/mod:v0.41.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/mod@v0.41.0"}]}, {"name": "golang.org/x/net", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-net-10a4bb7de3ed016e", "versionInfo": "v0.59.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:networking:v0.59.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/net@v0.59.0"}]}, {"name": "golang.org/x/oauth2", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-oauth2-f33316132920cd69", "versionInfo": "v0.37.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/oauth2:v0.37.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/oauth2@v0.37.0"}]}, {"name": "golang.org/x/sys", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sys-6c873849a754be86", "versionInfo": "v0.48.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sys:v0.48.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sys@v0.48.0"}]}, {"name": "golang.org/x/text", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-text-373cd3bb2b5cb4ef", "versionInfo": "v0.42.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:text:v0.42.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/text@v0.42.0"}]}, {"name": "golang.org/x/time", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-time-9ff1cf69c3b74d01", "versionInfo": "v0.16.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/time:v0.16.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/time@v0.16.0"}]}, {"name": "google.golang.org/api", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-api-6b2c44e2f6a00a90", "versionInfo": "v0.300.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:api:v0.300.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/api@v0.300.0"}]}, {"name": "google.golang.org/genproto/googleapis/api", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-da605449ea7588e1", "versionInfo": "v0.0.0-20260715232425-e75dac1f907d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260715232425-e75dac1f907d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260715232425-e75dac1f907d#api"}]}, {"name": "google.golang.org/genproto/googleapis/rpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-82e952ebc66b98c5", "versionInfo": "v0.0.0-20260921155816-b14227669459", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260921155816-b14227669459:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260921155816-b14227669459#rpc"}]}, {"name": "google.golang.org/grpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-grpc-1e0a629c2e187090", "versionInfo": "v1.84.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:grpc:v1.84.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/grpc@v1.84.0"}]}, {"name": "google.golang.org/protobuf", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-protobuf-0521c5f844ce36ef", "versionInfo": "v1.36.12", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:protobuf:v1.36.12:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/protobuf@v1.36.12"}]}, {"name": "gopkg.in/yaml.v2", "SPDXID": "SPDXRef-Package-go-module-gopkg.in-yaml.v2-334ef4a5772a819f", "versionInfo": "v2.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/gopkg.in/yaml.v2@v2.4.0"}]}, {"name": "gopkg.in/yaml.v3", "SPDXID": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-2d5184aa4d6a34af", "versionInfo": "v3.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml_project:yaml:v3.0.1:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/gopkg.in/yaml.v3@v3.0.1"}]}, {"name": "stdlib", "SPDXID": "SPDXRef-Package-go-module-stdlib-f082e63930a8c824", "versionInfo": "go1.27.1-X:nodwarf5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:go:1.27.1:-:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/stdlib@1.27.1-X%3Anodwarf5"}]}, {"name": "rpm-extracted/dex-2.46.0-0.1.hum1.aarch64", "SPDXID": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "./.github/workflows/artifacts.yaml", "SPDXID": "SPDXRef-Package-github-action-workflow-.-.github-workflows-artifacts.yaml-d39fecea2c00cdf8", "versionInfo": "UNKNOWN", "supplier": "Organization: .", "originator": "Organization: .", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /dex-2.46.0/.github/workflows/ci.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:.\\/.github\\/workflows\\/artifacts.yaml:.\\/.github\\/workflows\\/artifacts.yaml:*:*:*:*:*:*:*:*"}]}, {"name": "./.github/workflows/artifacts.yaml", "SPDXID": "SPDXRef-Package-github-action-workflow-.-.github-workflows-artifacts.yaml-1c6f585d6bd57b8e", "versionInfo": "UNKNOWN", "supplier": "Organization: .", "originator": "Organization: .", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /dex-2.46.0/.github/workflows/release.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:.\\/.github\\/workflows\\/artifacts.yaml:.\\/.github\\/workflows\\/artifacts.yaml:*:*:*:*:*:*:*:*"}]}, {"name": "actions/attest-build-provenance", "SPDXID": "SPDXRef-Package-github-action-actions-attest-build-provenance-8d3c9891ba21f013", "versionInfo": "v4.2.2", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /dex-2.46.0/.github/workflows/artifacts.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/attest-build-provenance:actions\\/attest-build-provenance:v4.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/attest-build-provenance:actions\\/attest_build_provenance:v4.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/attest_build_provenance:actions\\/attest-build-provenance:v4.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/attest_build_provenance:actions\\/attest_build_provenance:v4.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/attest-build:actions\\/attest-build-provenance:v4.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/attest-build:actions\\/attest_build_provenance:v4.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/attest_build:actions\\/attest-build-provenance:v4.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/attest_build:actions\\/attest_build_provenance:v4.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/attest:actions\\/attest-build-provenance:v4.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/attest:actions\\/attest_build_provenance:v4.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/attest-build-provenance@v4.2.2"}]}, {"name": "actions/cache", "SPDXID": "SPDXRef-Package-github-action-actions-cache-9f1876fc8a0e7861", "versionInfo": "v6.1.0", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /dex-2.46.0/.github/workflows/artifacts.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/cache:actions\\/cache:v6.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/cache@v6.1.0"}]}, {"name": "actions/cache/save", "SPDXID": "SPDXRef-Package-github-action-actions-cache-save-1ebd149791f56cf1", "versionInfo": "v6.1.0", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /dex-2.46.0/.github/workflows/trivydb-cache.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/cache\\/save:actions\\/cache\\/save:v6.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/cache@v6.1.0#save"}]}, {"name": "actions/checkout", "SPDXID": "SPDXRef-Package-github-action-actions-checkout-6a2571a5717d4403", "versionInfo": "v7.0.1", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /dex-2.46.0/.github/workflows/analysis-scorecard.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/checkout@v7.0.1"}]}, {"name": "actions/checkout", "SPDXID": "SPDXRef-Package-github-action-actions-checkout-c3840c4442611bc9", "versionInfo": "v7.0.1", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /dex-2.46.0/.github/workflows/artifacts.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/checkout@v7.0.1"}]}, {"name": "actions/checkout", "SPDXID": "SPDXRef-Package-github-action-actions-checkout-c80c1234042624c8", "versionInfo": "v7.0.1", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /dex-2.46.0/.github/workflows/ci.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/checkout@v7.0.1"}]}, {"name": "actions/dependency-review-action", "SPDXID": "SPDXRef-Package-github-action-actions-dependency-review-action-8a623f4132573f38", "versionInfo": "v5.0.0", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /dex-2.46.0/.github/workflows/ci.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/dependency-review-action:actions\\/dependency-review-action:v5.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/dependency-review-action:actions\\/dependency_review_action:v5.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/dependency_review_action:actions\\/dependency-review-action:v5.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/dependency_review_action:actions\\/dependency_review_action:v5.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/dependency-review:actions\\/dependency-review-action:v5.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/dependency-review:actions\\/dependency_review_action:v5.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/dependency_review:actions\\/dependency-review-action:v5.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/dependency_review:actions\\/dependency_review_action:v5.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/dependency:actions\\/dependency-review-action:v5.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/dependency:actions\\/dependency_review_action:v5.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/dependency-review-action@v5.0.0"}]}, {"name": "actions/setup-go", "SPDXID": "SPDXRef-Package-github-action-actions-setup-go-f444a073e9f1ec37", "versionInfo": "v7.0.0", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /dex-2.46.0/.github/workflows/ci.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/setup-go@v7.0.0"}]}, {"name": "actions/upload-artifact", "SPDXID": "SPDXRef-Package-github-action-actions-upload-artifact-4112e292dfa08547", "versionInfo": "v7.0.1", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /dex-2.46.0/.github/workflows/analysis-scorecard.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/upload-artifact@v7.0.1"}]}, {"name": "actions/upload-artifact", "SPDXID": "SPDXRef-Package-github-action-actions-upload-artifact-17d55088ce31e203", "versionInfo": "v7.0.1", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /dex-2.46.0/.github/workflows/artifacts.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/upload-artifact@v7.0.1"}]}, {"name": "anchore/sbom-action/download-syft", "SPDXID": "SPDXRef-Package-github-action-anchore-sbom-action-download-syft-3dc6b4d79fd7888d", "versionInfo": "v0.24.3", "supplier": "Organization: anchore", "originator": "Organization: anchore", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /dex-2.46.0/.github/workflows/artifacts.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/sbom-action\\/download-syft:anchore\\/sbom-action\\/download-syft:v0.24.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/sbom-action\\/download-syft:anchore\\/sbom_action\\/download_syft:v0.24.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/sbom_action\\/download_syft:anchore\\/sbom-action\\/download-syft:v0.24.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/sbom_action\\/download_syft:anchore\\/sbom_action\\/download_syft:v0.24.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/sbom-action\\/download:anchore\\/sbom-action\\/download-syft:v0.24.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/sbom-action\\/download:anchore\\/sbom_action\\/download_syft:v0.24.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/sbom_action\\/download:anchore\\/sbom-action\\/download-syft:v0.24.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/sbom_action\\/download:anchore\\/sbom_action\\/download_syft:v0.24.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/sbom:anchore\\/sbom-action\\/download-syft:v0.24.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/sbom:anchore\\/sbom_action\\/download_syft:v0.24.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/anchore/sbom-action@v0.24.3#download-syft"}]}, {"name": "aquasecurity/trivy-action", "SPDXID": "SPDXRef-Package-github-action-aquasecurity-trivy-action-e6d71cbedfa5e26f", "versionInfo": "0.36.0", "supplier": "Organization: aquasecurity", "originator": "Organization: aquasecurity", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /dex-2.46.0/.github/workflows/artifacts.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity\\/trivy-action:aquasecurity\\/trivy-action:0.36.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity\\/trivy-action:aquasecurity\\/trivy_action:0.36.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity\\/trivy_action:aquasecurity\\/trivy-action:0.36.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity\\/trivy_action:aquasecurity\\/trivy_action:0.36.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity\\/trivy:aquasecurity\\/trivy-action:0.36.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity\\/trivy:aquasecurity\\/trivy_action:0.36.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/aquasecurity/trivy-action@0.36.0"}]}, {"name": "ariga.io/atlas", "SPDXID": "SPDXRef-Package-go-module-ariga.io-atlas-69cbfea5335b2788", "versionInfo": "v0.36.2-0.20250730182955-2c6300d0a3e1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/ariga.io/atlas@v0.36.2-0.20250730182955-2c6300d0a3e1"}]}, {"name": "ariga.io/atlas", "SPDXID": "SPDXRef-Package-go-module-ariga.io-atlas-807935f7a5ecb8fb", "versionInfo": "v0.36.2-0.20250730182955-2c6300d0a3e1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/ariga.io/atlas@v0.36.2-0.20250730182955-2c6300d0a3e1"}]}, {"name": "cel.dev/expr", "SPDXID": "SPDXRef-Package-go-module-cel.dev-expr-046d37f2a3bdf87b", "versionInfo": "v0.25.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cel.dev/expr@v0.25.2"}]}, {"name": "cel.dev/expr", "SPDXID": "SPDXRef-Package-go-module-cel.dev-expr-50296d5ce895996f", "versionInfo": "v0.25.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cel.dev/expr@v0.25.2"}]}, {"name": "cloud.google.com/go/auth", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-auth-1608186ebc45257b", "versionInfo": "v0.24.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:auth:v0.24.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/auth@v0.24.0"}]}, {"name": "cloud.google.com/go/auth", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-auth-6d57c1dda6ac8df3", "versionInfo": "v0.24.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:auth:v0.24.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/auth@v0.24.0"}]}, {"name": "cloud.google.com/go/auth/oauth2adapt", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-287213c18b3cbd37", "versionInfo": "v0.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:auth\\/oauth2adapt:v0.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/auth@v0.3.0#oauth2adapt"}]}, {"name": "cloud.google.com/go/auth/oauth2adapt", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-2a624276f70575e9", "versionInfo": "v0.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:auth\\/oauth2adapt:v0.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/auth@v0.3.0#oauth2adapt"}]}, {"name": "cloud.google.com/go/compute/metadata", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-df54a8ebe8dd4d5d", "versionInfo": "v0.10.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:compute\\/metadata:v0.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/compute@v0.10.0#metadata"}]}, {"name": "cloud.google.com/go/compute/metadata", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-c1575fca953a051b", "versionInfo": "v0.10.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:compute\\/metadata:v0.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/compute@v0.10.0#metadata"}]}, {"name": "codespell", "SPDXID": "SPDXRef-Package-python-codespell-ee00abe66a169021", "versionInfo": "2.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from installed python package manifest file: /vendor/go.opentelemetry.io/otel/requirements.txt", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python-codespell:python-codespell:2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python-codespell:python_codespell:2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python_codespell:python-codespell:2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python_codespell:python_codespell:2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:codespell:python-codespell:2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:codespell:python_codespell:2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python-codespell:codespell:2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python_codespell:codespell:2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python:python-codespell:2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python:python_codespell:2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:codespell:codespell:2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python:codespell:2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:pypi/codespell@2.4.3"}]}, {"name": "dario.cat/mergo", "SPDXID": "SPDXRef-Package-go-module-dario.cat-mergo-b4ba68c30201f517", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/dario.cat/mergo@v1.0.1"}]}, {"name": "dario.cat/mergo", "SPDXID": "SPDXRef-Package-go-module-dario.cat-mergo-c918163fc2b8b714", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/dario.cat/mergo@v1.0.1"}]}, {"name": "docker/build-push-action", "SPDXID": "SPDXRef-Package-github-action-docker-build-push-action-8117317f720f24bf", "versionInfo": "v7.4.0", "supplier": "Organization: docker", "originator": "Organization: docker", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /dex-2.46.0/.github/workflows/artifacts.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/build-push-action:docker\\/build-push-action:v7.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/build-push-action:docker\\/build_push_action:v7.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/build_push_action:docker\\/build-push-action:v7.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/build_push_action:docker\\/build_push_action:v7.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/build-push:docker\\/build-push-action:v7.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/build-push:docker\\/build_push_action:v7.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/build_push:docker\\/build-push-action:v7.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/build_push:docker\\/build_push_action:v7.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/build:docker\\/build-push-action:v7.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/build:docker\\/build_push_action:v7.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/docker/build-push-action@v7.4.0"}]}, {"name": "docker/login-action", "SPDXID": "SPDXRef-Package-github-action-docker-login-action-c0964dc37b6b69d0", "versionInfo": "v4.6.0", "supplier": "Organization: docker", "originator": "Organization: docker", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /dex-2.46.0/.github/workflows/artifacts.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/login-action:docker\\/login-action:v4.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/login-action:docker\\/login_action:v4.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/login_action:docker\\/login-action:v4.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/login_action:docker\\/login_action:v4.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/login:docker\\/login-action:v4.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/login:docker\\/login_action:v4.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/docker/login-action@v4.6.0"}]}, {"name": "docker/metadata-action", "SPDXID": "SPDXRef-Package-github-action-docker-metadata-action-5e23cf461e3a78ee", "versionInfo": "v6.2.0", "supplier": "Organization: docker", "originator": "Organization: docker", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /dex-2.46.0/.github/workflows/artifacts.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/metadata-action:docker\\/metadata-action:v6.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/metadata-action:docker\\/metadata_action:v6.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/metadata_action:docker\\/metadata-action:v6.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/metadata_action:docker\\/metadata_action:v6.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/metadata:docker\\/metadata-action:v6.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/metadata:docker\\/metadata_action:v6.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/docker/metadata-action@v6.2.0"}]}, {"name": "docker/setup-buildx-action", "SPDXID": "SPDXRef-Package-github-action-docker-setup-buildx-action-289e24b192ca6fd2", "versionInfo": "v4.4.1", "supplier": "Organization: docker", "originator": "Organization: docker", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /dex-2.46.0/.github/workflows/artifacts.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup-buildx-action:docker\\/setup-buildx-action:v4.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup-buildx-action:docker\\/setup_buildx_action:v4.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup_buildx_action:docker\\/setup-buildx-action:v4.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup_buildx_action:docker\\/setup_buildx_action:v4.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup-buildx:docker\\/setup-buildx-action:v4.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup-buildx:docker\\/setup_buildx_action:v4.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup_buildx:docker\\/setup-buildx-action:v4.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup_buildx:docker\\/setup_buildx_action:v4.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup:docker\\/setup-buildx-action:v4.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup:docker\\/setup_buildx_action:v4.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/docker/setup-buildx-action@v4.4.1"}]}, {"name": "docker/setup-qemu-action", "SPDXID": "SPDXRef-Package-github-action-docker-setup-qemu-action-e9f3e628604e9dab", "versionInfo": "v4.4.0", "supplier": "Organization: docker", "originator": "Organization: docker", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /dex-2.46.0/.github/workflows/artifacts.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup-qemu-action:docker\\/setup-qemu-action:v4.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup-qemu-action:docker\\/setup_qemu_action:v4.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup_qemu_action:docker\\/setup-qemu-action:v4.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup_qemu_action:docker\\/setup_qemu_action:v4.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup-qemu:docker\\/setup-qemu-action:v4.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup-qemu:docker\\/setup_qemu_action:v4.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup_qemu:docker\\/setup-qemu-action:v4.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup_qemu:docker\\/setup_qemu_action:v4.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup:docker\\/setup-qemu-action:v4.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup:docker\\/setup_qemu_action:v4.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/docker/setup-qemu-action@v4.4.0"}]}, {"name": "entgo.io/ent", "SPDXID": "SPDXRef-Package-go-module-entgo.io-ent-98323cc58705b998", "versionInfo": "v0.14.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/entgo.io/ent@v0.14.6"}]}, {"name": "entgo.io/ent", "SPDXID": "SPDXRef-Package-go-module-entgo.io-ent-ec8085e6c791b538", "versionInfo": "v0.14.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/entgo.io/ent@v0.14.6"}]}, {"name": "filippo.io/edwards25519", "SPDXID": "SPDXRef-Package-go-module-filippo.io-edwards25519-11711ea11ebbab4f", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/filippo.io/edwards25519@v1.2.0"}]}, {"name": "filippo.io/edwards25519", "SPDXID": "SPDXRef-Package-go-module-filippo.io-edwards25519-06417845d4479ea3", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/filippo.io/edwards25519@v1.2.0"}]}, {"name": "github.com/AppsFlyer/go-sundheit", "SPDXID": "SPDXRef-Package-go-module-github.com-AppsFlyer-go-sundheit-b7c54a953186a697", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:AppsFlyer:go-sundheit:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:AppsFlyer:go_sundheit:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/AppsFlyer/go-sundheit@v0.6.0"}]}, {"name": "github.com/AppsFlyer/go-sundheit", "SPDXID": "SPDXRef-Package-go-module-github.com-AppsFlyer-go-sundheit-6ae9a2700490b968", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:AppsFlyer:go-sundheit:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:AppsFlyer:go_sundheit:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/AppsFlyer/go-sundheit@v0.6.0"}]}, {"name": "github.com/Azure/go-ntlmssp", "SPDXID": "SPDXRef-Package-go-module-github.com-Azure-go-ntlmssp-965661720fffe566", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Azure:go-ntlmssp:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Azure:go_ntlmssp:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Azure/go-ntlmssp@v0.1.1"}]}, {"name": "github.com/Azure/go-ntlmssp", "SPDXID": "SPDXRef-Package-go-module-github.com-Azure-go-ntlmssp-2a5d72c123e5e3ba", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Azure:go-ntlmssp:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Azure:go_ntlmssp:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Azure/go-ntlmssp@v0.1.1"}]}, {"name": "github.com/Masterminds/goutils", "SPDXID": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-0e68ee2a469f0834", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:goutils_project:goutils:v1.1.1:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Masterminds/goutils@v1.1.1"}]}, {"name": "github.com/Masterminds/goutils", "SPDXID": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-4a60e6f3f9cac2b0", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:goutils_project:goutils:v1.1.1:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Masterminds/goutils@v1.1.1"}]}, {"name": "github.com/Masterminds/semver", "SPDXID": "SPDXRef-Package-go-module-github.com-Masterminds-semver-81f0e684e432a579", "versionInfo": "v1.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Masterminds:semver:v1.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Masterminds/semver@v1.5.0"}]}, {"name": "github.com/Masterminds/semver", "SPDXID": "SPDXRef-Package-go-module-github.com-Masterminds-semver-269202069433522d", "versionInfo": "v1.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Masterminds:semver:v1.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Masterminds/semver@v1.5.0"}]}, {"name": "github.com/Masterminds/semver/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-74fc58d4ffd07775", "versionInfo": "v3.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Masterminds:semver\\/v3:v3.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Masterminds/semver@v3.3.0#v3"}]}, {"name": "github.com/Masterminds/semver/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-b8f714bc940dd631", "versionInfo": "v3.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Masterminds:semver\\/v3:v3.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Masterminds/semver@v3.3.0#v3"}]}, {"name": "github.com/Masterminds/sprig/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-d4640bed903fe9da", "versionInfo": "v3.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Masterminds:sprig\\/v3:v3.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Masterminds/sprig@v3.3.0#v3"}]}, {"name": "github.com/Masterminds/sprig/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-17921bc3f2f4444b", "versionInfo": "v3.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Masterminds:sprig\\/v3:v3.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Masterminds/sprig@v3.3.0#v3"}]}, {"name": "github.com/agext/levenshtein", "SPDXID": "SPDXRef-Package-go-module-github.com-agext-levenshtein-a0d3a279d1e1c9ba", "versionInfo": "v1.2.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:agext:levenshtein:v1.2.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/agext/levenshtein@v1.2.3"}]}, {"name": "github.com/agext/levenshtein", "SPDXID": "SPDXRef-Package-go-module-github.com-agext-levenshtein-64d88b1cfcc4917a", "versionInfo": "v1.2.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:agext:levenshtein:v1.2.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/agext/levenshtein@v1.2.3"}]}, {"name": "github.com/antlr4-go/antlr/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-antlr4-go-antlr-v4-9c5df3dfc7e51ef2", "versionInfo": "v4.13.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:antlr4-go:antlr\\/v4:v4.13.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:antlr4_go:antlr\\/v4:v4.13.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:antlr4:antlr\\/v4:v4.13.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/antlr4-go/antlr@v4.13.1#v4"}]}, {"name": "github.com/antlr4-go/antlr/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-antlr4-go-antlr-v4-c4b83ef3d4f3b430", "versionInfo": "v4.13.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:antlr4-go:antlr\\/v4:v4.13.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:antlr4_go:antlr\\/v4:v4.13.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:antlr4:antlr\\/v4:v4.13.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/antlr4-go/antlr@v4.13.1#v4"}]}, {"name": "github.com/apparentlymart/go-textseg/v15", "SPDXID": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-5d5f1af24474e591", "versionInfo": "v15.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apparentlymart:go-textseg\\/v15:v15.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apparentlymart:go_textseg\\/v15:v15.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/apparentlymart/go-textseg@v15.0.0#v15"}]}, {"name": "github.com/apparentlymart/go-textseg/v15", "SPDXID": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-e406d1260ec16639", "versionInfo": "v15.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apparentlymart:go-textseg\\/v15:v15.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apparentlymart:go_textseg\\/v15:v15.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/apparentlymart/go-textseg@v15.0.0#v15"}]}, {"name": "github.com/beevik/etree", "SPDXID": "SPDXRef-Package-go-module-github.com-beevik-etree-decd13bbd3c90b82", "versionInfo": "v1.8.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:beevik:etree:v1.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/beevik/etree@v1.8.1"}]}, {"name": "github.com/beevik/etree", "SPDXID": "SPDXRef-Package-go-module-github.com-beevik-etree-e7059bb24d3f7fcc", "versionInfo": "v1.8.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:beevik:etree:v1.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/beevik/etree@v1.8.1"}]}, {"name": "github.com/beorn7/perks", "SPDXID": "SPDXRef-Package-go-module-github.com-beorn7-perks-ad2cac82a398f573", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:beorn7:perks:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/beorn7/perks@v1.0.1"}]}, {"name": "github.com/beorn7/perks", "SPDXID": "SPDXRef-Package-go-module-github.com-beorn7-perks-4b7f4d17e7911c1a", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:beorn7:perks:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/beorn7/perks@v1.0.1"}]}, {"name": "github.com/bmatcuk/doublestar", "SPDXID": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-b9e1999c62408e4d", "versionInfo": "v1.3.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bmatcuk:doublestar:v1.3.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bmatcuk/doublestar@v1.3.4"}]}, {"name": "github.com/bmatcuk/doublestar", "SPDXID": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-f3561b3cdbd04bb6", "versionInfo": "v1.3.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bmatcuk:doublestar:v1.3.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bmatcuk/doublestar@v1.3.4"}]}, {"name": "github.com/boombuler/barcode", "SPDXID": "SPDXRef-Package-go-module-github.com-boombuler-barcode-17f09ae7110de681", "versionInfo": "v1.0.1-0.20190219062509-6c824513bacc", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:boombuler:barcode:v1.0.1-0.20190219062509-6c824513bacc:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/boombuler/barcode@v1.0.1-0.20190219062509-6c824513bacc"}]}, {"name": "github.com/boombuler/barcode", "SPDXID": "SPDXRef-Package-go-module-github.com-boombuler-barcode-da910c4bbf11d591", "versionInfo": "v1.0.1-0.20190219062509-6c824513bacc", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:boombuler:barcode:v1.0.1-0.20190219062509-6c824513bacc:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/boombuler/barcode@v1.0.1-0.20190219062509-6c824513bacc"}]}, {"name": "github.com/cenkalti/backoff/v5", "SPDXID": "SPDXRef-Package-go-module-github.com-cenkalti-backoff-v5-f8e11116fb66effe", "versionInfo": "v5.0.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cenkalti:backoff\\/v5:v5.0.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cenkalti/backoff@v5.0.3#v5"}]}, {"name": "github.com/cenkalti/backoff/v5", "SPDXID": "SPDXRef-Package-go-module-github.com-cenkalti-backoff-v5-5e9265ff67aa38c8", "versionInfo": "v5.0.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cenkalti:backoff\\/v5:v5.0.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cenkalti/backoff@v5.0.3#v5"}]}, {"name": "github.com/cespare/xxhash/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-1e15815490689fcc", "versionInfo": "v2.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cespare/xxhash@v2.3.0#v2"}]}, {"name": "github.com/cespare/xxhash/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-44163de5007e6449", "versionInfo": "v2.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cespare/xxhash@v2.3.0#v2"}]}, {"name": "github.com/clipperhouse/displaywidth", "SPDXID": "SPDXRef-Package-go-module-github.com-clipperhouse-displaywidth-207777caeda17856", "versionInfo": "v0.6.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:clipperhouse:displaywidth:v0.6.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/clipperhouse/displaywidth@v0.6.2"}]}, {"name": "github.com/clipperhouse/displaywidth", "SPDXID": "SPDXRef-Package-go-module-github.com-clipperhouse-displaywidth-9278c8415c55c06c", "versionInfo": "v0.6.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:clipperhouse:displaywidth:v0.6.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/clipperhouse/displaywidth@v0.6.2"}]}, {"name": "github.com/clipperhouse/stringish", "SPDXID": "SPDXRef-Package-go-module-github.com-clipperhouse-stringish-7898d637687b3054", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:clipperhouse:stringish:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/clipperhouse/stringish@v0.1.1"}]}, {"name": "github.com/clipperhouse/stringish", "SPDXID": "SPDXRef-Package-go-module-github.com-clipperhouse-stringish-9795481afef48435", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:clipperhouse:stringish:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/clipperhouse/stringish@v0.1.1"}]}, {"name": "github.com/clipperhouse/uax29/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-8e2f51f20e774df3", "versionInfo": "v2.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:clipperhouse:uax29\\/v2:v2.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/clipperhouse/uax29@v2.3.0#v2"}]}, {"name": "github.com/clipperhouse/uax29/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-f7138c5445d92489", "versionInfo": "v2.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:clipperhouse:uax29\\/v2:v2.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/clipperhouse/uax29@v2.3.0#v2"}]}, {"name": "github.com/coreos/go-oidc/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-coreos-go-oidc-v3-383875e9e47f9ea0", "versionInfo": "v3.21.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/examples/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go-oidc\\/v3:v3.21.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go_oidc\\/v3:v3.21.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/coreos/go-oidc@v3.21.0#v3"}]}, {"name": "github.com/coreos/go-oidc/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-coreos-go-oidc-v3-bc364aa881cfb2e7", "versionInfo": "v3.21.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go-oidc\\/v3:v3.21.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go_oidc\\/v3:v3.21.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/coreos/go-oidc@v3.21.0#v3"}]}, {"name": "github.com/coreos/go-oidc/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-coreos-go-oidc-v3-e5919b0d2d6e62f0", "versionInfo": "v3.21.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go-oidc\\/v3:v3.21.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go_oidc\\/v3:v3.21.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/coreos/go-oidc@v3.21.0#v3"}]}, {"name": "github.com/coreos/go-semver", "SPDXID": "SPDXRef-Package-go-module-github.com-coreos-go-semver-42de5ece53fc3dae", "versionInfo": "v0.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go-semver:v0.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go_semver:v0.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/coreos/go-semver@v0.3.1"}]}, {"name": "github.com/coreos/go-semver", "SPDXID": "SPDXRef-Package-go-module-github.com-coreos-go-semver-9f9785da82e0d3db", "versionInfo": "v0.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go-semver:v0.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go_semver:v0.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/coreos/go-semver@v0.3.1"}]}, {"name": "github.com/coreos/go-systemd/v22", "SPDXID": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-v22-c08ebf1e1441a49b", "versionInfo": "v22.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go-systemd\\/v22:v22.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go_systemd\\/v22:v22.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/coreos/go-systemd@v22.7.0#v22"}]}, {"name": "github.com/coreos/go-systemd/v22", "SPDXID": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-v22-df82ff7b5a85e27a", "versionInfo": "v22.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go-systemd\\/v22:v22.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go_systemd\\/v22:v22.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/coreos/go-systemd@v22.7.0#v22"}]}, {"name": "github.com/dexidp/dex/api/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-dexidp-dex-api-v2-109693075217a78b", "versionInfo": "UNKNOWN", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/examples/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dexidp:dex\\/api\\/v2:*:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/dexidp/dex#api/v2"}]}, {"name": "github.com/dexidp/dex/api/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-dexidp-dex-api-v2-d4b3abb86db9ecda", "versionInfo": "UNKNOWN", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dexidp:dex\\/api\\/v2:*:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/dexidp/dex#api/v2"}]}, {"name": "github.com/dexidp/dex/api/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-dexidp-dex-api-v2-b9e4c71414c2732c", "versionInfo": "UNKNOWN", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dexidp:dex\\/api\\/v2:*:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/dexidp/dex#api/v2"}]}, {"name": "github.com/fatih/color", "SPDXID": "SPDXRef-Package-go-module-github.com-fatih-color-5091b8ef7b342e64", "versionInfo": "v1.19.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fatih:color:v1.19.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fatih/color@v1.19.0"}]}, {"name": "github.com/fatih/color", "SPDXID": "SPDXRef-Package-go-module-github.com-fatih-color-71360e4063543be3", "versionInfo": "v1.19.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fatih:color:v1.19.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fatih/color@v1.19.0"}]}, {"name": "github.com/felixge/httpsnoop", "SPDXID": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-d2c68185074da7ad", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:felixge:httpsnoop:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/felixge/httpsnoop@v1.1.0"}]}, {"name": "github.com/felixge/httpsnoop", "SPDXID": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-21924c216340421a", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:felixge:httpsnoop:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/felixge/httpsnoop@v1.1.0"}]}, {"name": "github.com/fsnotify/fsnotify", "SPDXID": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-b085cd8b0a1796c0", "versionInfo": "v1.10.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fsnotify:fsnotify:v1.10.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fsnotify/fsnotify@v1.10.1"}]}, {"name": "github.com/fsnotify/fsnotify", "SPDXID": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-73529cb77374f1e3", "versionInfo": "v1.10.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fsnotify:fsnotify:v1.10.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fsnotify/fsnotify@v1.10.1"}]}, {"name": "github.com/fxamacker/cbor/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-fxamacker-cbor-v2-9146569dc901db6e", "versionInfo": "v2.9.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fxamacker:cbor\\/v2:v2.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fxamacker/cbor@v2.9.4#v2"}]}, {"name": "github.com/fxamacker/cbor/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-fxamacker-cbor-v2-a63e67c151e3bd64", "versionInfo": "v2.9.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fxamacker:cbor\\/v2:v2.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fxamacker/cbor@v2.9.4#v2"}]}, {"name": "github.com/ghodss/yaml", "SPDXID": "SPDXRef-Package-go-module-github.com-ghodss-yaml-100d0e3197770c33", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ghodss:yaml:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/ghodss/yaml@v1.0.0"}]}, {"name": "github.com/ghodss/yaml", "SPDXID": "SPDXRef-Package-go-module-github.com-ghodss-yaml-1da7d4fbb85390fb", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ghodss:yaml:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/ghodss/yaml@v1.0.0"}]}, {"name": "github.com/go-asn1-ber/asn1-ber", "SPDXID": "SPDXRef-Package-go-module-github.com-go-asn1-ber-asn1-ber-ebdfa3a539c7538b", "versionInfo": "v1.5.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-asn1-ber:asn1-ber:v1.5.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-asn1-ber:asn1_ber:v1.5.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_asn1_ber:asn1-ber:v1.5.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_asn1_ber:asn1_ber:v1.5.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-asn1:asn1-ber:v1.5.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-asn1:asn1_ber:v1.5.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_asn1:asn1-ber:v1.5.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_asn1:asn1_ber:v1.5.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:asn1-ber:v1.5.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:asn1_ber:v1.5.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-asn1-ber/asn1-ber@v1.5.8"}]}, {"name": "github.com/go-asn1-ber/asn1-ber", "SPDXID": "SPDXRef-Package-go-module-github.com-go-asn1-ber-asn1-ber-12331bb1643ce5c5", "versionInfo": "v1.5.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-asn1-ber:asn1-ber:v1.5.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-asn1-ber:asn1_ber:v1.5.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_asn1_ber:asn1-ber:v1.5.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_asn1_ber:asn1_ber:v1.5.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-asn1:asn1-ber:v1.5.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-asn1:asn1_ber:v1.5.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_asn1:asn1-ber:v1.5.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_asn1:asn1_ber:v1.5.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:asn1-ber:v1.5.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:asn1_ber:v1.5.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-asn1-ber/asn1-ber@v1.5.8"}]}, {"name": "github.com/go-jose/go-jose/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-4965ce56f389a709", "versionInfo": "v4.1.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/examples/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-jose/go-jose@v4.1.4#v4"}]}, {"name": "github.com/go-jose/go-jose/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-012aec78e8c156c1", "versionInfo": "v4.1.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go-jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go_jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go-jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go_jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-jose/go-jose@v4.1.5#v4"}]}, {"name": "github.com/go-jose/go-jose/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-05eb82ff5b803225", "versionInfo": "v4.1.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go-jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go_jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go-jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go_jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-jose/go-jose@v4.1.5#v4"}]}, {"name": "github.com/go-ldap/ldap/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-go-ldap-ldap-v3-eaf64cfe46eb6b7d", "versionInfo": "v3.4.14", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-ldap:ldap\\/v3:v3.4.14:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_ldap:ldap\\/v3:v3.4.14:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:ldap\\/v3:v3.4.14:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-ldap/ldap@v3.4.14#v3"}]}, {"name": "github.com/go-ldap/ldap/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-go-ldap-ldap-v3-ead17bfb74373a10", "versionInfo": "v3.4.14", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-ldap:ldap\\/v3:v3.4.14:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_ldap:ldap\\/v3:v3.4.14:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:ldap\\/v3:v3.4.14:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-ldap/ldap@v3.4.14#v3"}]}, {"name": "github.com/go-logr/logr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-logr-eefe57a9be02650c", "versionInfo": "v1.4.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:logr:v1.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:logr:v1.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:logr:v1.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/logr@v1.4.4"}]}, {"name": "github.com/go-logr/logr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-logr-5d64ad5913a6841c", "versionInfo": "v1.4.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:logr:v1.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:logr:v1.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:logr:v1.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/logr@v1.4.4"}]}, {"name": "github.com/go-logr/stdr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-stdr-c04d63d3f10bb59a", "versionInfo": "v1.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/stdr@v1.2.2"}]}, {"name": "github.com/go-logr/stdr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-stdr-ed7921825a53d3f4", "versionInfo": "v1.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/stdr@v1.2.2"}]}, {"name": "github.com/go-openapi/inflect", "SPDXID": "SPDXRef-Package-go-module-github.com-go-openapi-inflect-c808959165797986", "versionInfo": "v0.19.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-openapi:inflect:v0.19.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_openapi:inflect:v0.19.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:inflect:v0.19.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-openapi/inflect@v0.19.0"}]}, {"name": "github.com/go-openapi/inflect", "SPDXID": "SPDXRef-Package-go-module-github.com-go-openapi-inflect-55eaf8a8bd46fabe", "versionInfo": "v0.19.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-openapi:inflect:v0.19.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_openapi:inflect:v0.19.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:inflect:v0.19.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-openapi/inflect@v0.19.0"}]}, {"name": "github.com/go-sql-driver/mysql", "SPDXID": "SPDXRef-Package-go-module-github.com-go-sql-driver-mysql-95196d84cb9c0e92", "versionInfo": "v1.10.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-sql-driver:mysql:v1.10.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_sql_driver:mysql:v1.10.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-sql:mysql:v1.10.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_sql:mysql:v1.10.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:mysql:v1.10.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-sql-driver/mysql@v1.10.1"}]}, {"name": "github.com/go-sql-driver/mysql", "SPDXID": "SPDXRef-Package-go-module-github.com-go-sql-driver-mysql-5842a4832b626749", "versionInfo": "v1.10.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-sql-driver:mysql:v1.10.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_sql_driver:mysql:v1.10.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-sql:mysql:v1.10.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_sql:mysql:v1.10.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:mysql:v1.10.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-sql-driver/mysql@v1.10.1"}]}, {"name": "github.com/go-viper/mapstructure/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-44dd202f1c6449c3", "versionInfo": "v2.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-viper/mapstructure@v2.5.0#v2"}]}, {"name": "github.com/go-viper/mapstructure/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-69e67edfc2286e18", "versionInfo": "v2.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-viper/mapstructure@v2.5.0#v2"}]}, {"name": "github.com/go-webauthn/webauthn", "SPDXID": "SPDXRef-Package-go-module-github.com-go-webauthn-webauthn-b76f86f39f30327c", "versionInfo": "v0.18.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-webauthn:webauthn:v0.18.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_webauthn:webauthn:v0.18.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:webauthn:v0.18.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-webauthn/webauthn@v0.18.2"}]}, {"name": "github.com/go-webauthn/webauthn", "SPDXID": "SPDXRef-Package-go-module-github.com-go-webauthn-webauthn-984ab760de7ab683", "versionInfo": "v0.18.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-webauthn:webauthn:v0.18.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_webauthn:webauthn:v0.18.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:webauthn:v0.18.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-webauthn/webauthn@v0.18.2"}]}, {"name": "github.com/go-webauthn/x", "SPDXID": "SPDXRef-Package-go-module-github.com-go-webauthn-x-78467a839f87314f", "versionInfo": "v0.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-webauthn:x:v0.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_webauthn:x:v0.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:x:v0.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-webauthn/x@v0.3.1"}]}, {"name": "github.com/go-webauthn/x", "SPDXID": "SPDXRef-Package-go-module-github.com-go-webauthn-x-41875f8fedfee9c9", "versionInfo": "v0.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-webauthn:x:v0.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_webauthn:x:v0.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:x:v0.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-webauthn/x@v0.3.1"}]}, {"name": "github.com/golang-jwt/jwt/v5", "SPDXID": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-77be38dc77d54295", "versionInfo": "v5.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang-jwt:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang_jwt:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/golang-jwt/jwt@v5.3.1#v5"}]}, {"name": "github.com/golang-jwt/jwt/v5", "SPDXID": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-a9123a7cdb8224b1", "versionInfo": "v5.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang-jwt:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang_jwt:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/golang-jwt/jwt@v5.3.1#v5"}]}, {"name": "github.com/golang/protobuf", "SPDXID": "SPDXRef-Package-go-module-github.com-golang-protobuf-a5af37d81c019e99", "versionInfo": "v1.5.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:protobuf:v1.5.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/golang/protobuf@v1.5.4"}]}, {"name": "github.com/golang/protobuf", "SPDXID": "SPDXRef-Package-go-module-github.com-golang-protobuf-e9c488508e67ae88", "versionInfo": "v1.5.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:protobuf:v1.5.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/golang/protobuf@v1.5.4"}]}, {"name": "github.com/google/cel-go", "SPDXID": "SPDXRef-Package-go-module-github.com-google-cel-go-c10389b4b5a11476", "versionInfo": "v0.30.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:cel-go:v0.30.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:cel_go:v0.30.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/cel-go@v0.30.0"}]}, {"name": "github.com/google/cel-go", "SPDXID": "SPDXRef-Package-go-module-github.com-google-cel-go-e6b05ae4aca312cd", "versionInfo": "v0.30.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:cel-go:v0.30.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:cel_go:v0.30.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/cel-go@v0.30.0"}]}, {"name": "github.com/google/go-cmp", "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-cmp-12093e5e69de2716", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go-cmp:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go_cmp:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/go-cmp@v0.7.0"}]}, {"name": "github.com/google/go-cmp", "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-cmp-473d0adb4b419c7e", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go-cmp:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go_cmp:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/go-cmp@v0.7.0"}]}, {"name": "github.com/google/go-tpm", "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-tpm-8dbf9538ec5496e2", "versionInfo": "v0.9.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go-tpm:v0.9.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go_tpm:v0.9.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/go-tpm@v0.9.8"}]}, {"name": "github.com/google/go-tpm", "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-tpm-154b8d427a8e0247", "versionInfo": "v0.9.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go-tpm:v0.9.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go_tpm:v0.9.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/go-tpm@v0.9.8"}]}, {"name": "github.com/google/s2a-go", "SPDXID": "SPDXRef-Package-go-module-github.com-google-s2a-go-0579247a5173a955", "versionInfo": "v0.1.10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:s2a-go:v0.1.10:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:s2a_go:v0.1.10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/s2a-go@v0.1.10"}]}, {"name": "github.com/google/s2a-go", "SPDXID": "SPDXRef-Package-go-module-github.com-google-s2a-go-a30ef8f4ba34534f", "versionInfo": "v0.1.10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:s2a-go:v0.1.10:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:s2a_go:v0.1.10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/s2a-go@v0.1.10"}]}, {"name": "github.com/google/uuid", "SPDXID": "SPDXRef-Package-go-module-github.com-google-uuid-694568167dcb7bb1", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/uuid@v1.6.0"}]}, {"name": "github.com/google/uuid", "SPDXID": "SPDXRef-Package-go-module-github.com-google-uuid-f6424607fde0264b", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/uuid@v1.6.0"}]}, {"name": "github.com/googleapis/enterprise-certificate-proxy", "SPDXID": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-fedd531424679f33", "versionInfo": "v0.3.22", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:enterprise-certificate-proxy:v0.3.22:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:enterprise_certificate_proxy:v0.3.22:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.22"}]}, {"name": "github.com/googleapis/enterprise-certificate-proxy", "SPDXID": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-ad57399cb3c994ee", "versionInfo": "v0.3.22", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:enterprise-certificate-proxy:v0.3.22:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:enterprise_certificate_proxy:v0.3.22:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.22"}]}, {"name": "github.com/googleapis/gax-go/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-545b2b2ddc61bef5", "versionInfo": "v2.26.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:gax-go\\/v2:v2.26.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:gax_go\\/v2:v2.26.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/googleapis/gax-go@v2.26.2#v2"}]}, {"name": "github.com/googleapis/gax-go/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-2946d2fad4a39755", "versionInfo": "v2.26.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:gax-go\\/v2:v2.26.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:gax_go\\/v2:v2.26.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/googleapis/gax-go@v2.26.2#v2"}]}, {"name": "github.com/gorilla/handlers", "SPDXID": "SPDXRef-Package-go-module-github.com-gorilla-handlers-86ee2d7671b2bd51", "versionInfo": "v1.5.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gorilla:handlers:v1.5.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gorilla/handlers@v1.5.2"}]}, {"name": "github.com/gorilla/handlers", "SPDXID": "SPDXRef-Package-go-module-github.com-gorilla-handlers-e95f781843ad56d6", "versionInfo": "v1.5.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gorilla:handlers:v1.5.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gorilla/handlers@v1.5.2"}]}, {"name": "github.com/gorilla/mux", "SPDXID": "SPDXRef-Package-go-module-github.com-gorilla-mux-a63e13f40720e1cd", "versionInfo": "v1.8.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gorilla:mux:v1.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gorilla/mux@v1.8.1"}]}, {"name": "github.com/gorilla/mux", "SPDXID": "SPDXRef-Package-go-module-github.com-gorilla-mux-3aaebf4b073c46e0", "versionInfo": "v1.8.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gorilla:mux:v1.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gorilla/mux@v1.8.1"}]}, {"name": "github.com/grpc-ecosystem/go-grpc-prometheus", "SPDXID": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-go-grpc-prometheus-c07b049c1dcd89f4", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc-ecosystem:go-grpc-prometheus:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc-ecosystem:go_grpc_prometheus:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc_ecosystem:go-grpc-prometheus:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc_ecosystem:go_grpc_prometheus:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc:go-grpc-prometheus:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc:go_grpc_prometheus:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/grpc-ecosystem/go-grpc-prometheus@v1.2.0"}]}, {"name": "github.com/grpc-ecosystem/go-grpc-prometheus", "SPDXID": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-go-grpc-prometheus-031b343b9c39f08c", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc-ecosystem:go-grpc-prometheus:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc-ecosystem:go_grpc_prometheus:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc_ecosystem:go-grpc-prometheus:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc_ecosystem:go_grpc_prometheus:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc:go-grpc-prometheus:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc:go_grpc_prometheus:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/grpc-ecosystem/go-grpc-prometheus@v1.2.0"}]}, {"name": "github.com/grpc-ecosystem/grpc-gateway/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-grpc-gateway-v2-092a9d571953cce5", "versionInfo": "v2.29.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc-ecosystem:grpc-gateway\\/v2:v2.29.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc-ecosystem:grpc_gateway\\/v2:v2.29.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc_ecosystem:grpc-gateway\\/v2:v2.29.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc_ecosystem:grpc_gateway\\/v2:v2.29.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc:grpc-gateway\\/v2:v2.29.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc:grpc_gateway\\/v2:v2.29.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway@v2.29.0#v2"}]}, {"name": "github.com/grpc-ecosystem/grpc-gateway/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-grpc-gateway-v2-b8c8eb6cc916a0bf", "versionInfo": "v2.29.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc-ecosystem:grpc-gateway\\/v2:v2.29.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc-ecosystem:grpc_gateway\\/v2:v2.29.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc_ecosystem:grpc-gateway\\/v2:v2.29.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc_ecosystem:grpc_gateway\\/v2:v2.29.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc:grpc-gateway\\/v2:v2.29.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc:grpc_gateway\\/v2:v2.29.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway@v2.29.0#v2"}]}, {"name": "github.com/hashicorp/errwrap", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-89a232cdf633dbd1", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:errwrap:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0"}]}, {"name": "github.com/hashicorp/errwrap", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-56b7e6360dd390d7", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:errwrap:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0"}]}, {"name": "github.com/hashicorp/go-cleanhttp", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-2dcf09ad9dbcfa62", "versionInfo": "v0.5.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-cleanhttp:v0.5.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_cleanhttp:v0.5.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2"}]}, {"name": "github.com/hashicorp/go-cleanhttp", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-912d0981a4a0e36c", "versionInfo": "v0.5.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-cleanhttp:v0.5.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_cleanhttp:v0.5.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2"}]}, {"name": "github.com/hashicorp/go-multierror", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-8c070cee1582961d", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-multierror:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_multierror:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1"}]}, {"name": "github.com/hashicorp/go-multierror", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-b3d879cd60d2aaba", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-multierror:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_multierror:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1"}]}, {"name": "github.com/hashicorp/go-retryablehttp", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-retryablehttp-af7796e4ac458aa1", "versionInfo": "v0.7.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:retryablehttp:v0.7.8:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8"}]}, {"name": "github.com/hashicorp/go-retryablehttp", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-retryablehttp-82e2538e01314882", "versionInfo": "v0.7.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:retryablehttp:v0.7.8:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8"}]}, {"name": "github.com/hashicorp/go-secure-stdlib/parseutil", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-secure-stdlib-parseutil-db6ab3358b7e5b03", "versionInfo": "v0.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-secure-stdlib\\/parseutil:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_secure_stdlib\\/parseutil:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-secure-stdlib@v0.2.0#parseutil"}]}, {"name": "github.com/hashicorp/go-secure-stdlib/parseutil", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-secure-stdlib-parseutil-507b1688501fc20a", "versionInfo": "v0.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-secure-stdlib\\/parseutil:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_secure_stdlib\\/parseutil:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-secure-stdlib@v0.2.0#parseutil"}]}, {"name": "github.com/hashicorp/go-secure-stdlib/strutil", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-secure-stdlib-strutil-a0780576d5c1f47c", "versionInfo": "v0.1.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-secure-stdlib\\/strutil:v0.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_secure_stdlib\\/strutil:v0.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-secure-stdlib@v0.1.2#strutil"}]}, {"name": "github.com/hashicorp/go-secure-stdlib/strutil", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-secure-stdlib-strutil-50e0a12f2906f0e0", "versionInfo": "v0.1.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-secure-stdlib\\/strutil:v0.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_secure_stdlib\\/strutil:v0.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-secure-stdlib@v0.1.2#strutil"}]}, {"name": "github.com/hashicorp/go-sockaddr", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-sockaddr-742b5b2e39ea7897", "versionInfo": "v1.0.7", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-sockaddr:v1.0.7:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_sockaddr:v1.0.7:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-sockaddr@v1.0.7"}]}, {"name": "github.com/hashicorp/go-sockaddr", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-sockaddr-3767ecd5401149b7", "versionInfo": "v1.0.7", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-sockaddr:v1.0.7:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_sockaddr:v1.0.7:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-sockaddr@v1.0.7"}]}, {"name": "github.com/hashicorp/go-uuid", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-uuid-20723cf3bd4774fe", "versionInfo": "v1.0.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-uuid:v1.0.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_uuid:v1.0.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-uuid@v1.0.3"}]}, {"name": "github.com/hashicorp/go-uuid", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-uuid-9beb899c05e02450", "versionInfo": "v1.0.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-uuid:v1.0.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_uuid:v1.0.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-uuid@v1.0.3"}]}, {"name": "github.com/hashicorp/hcl", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-9c2c251e5aa7943c", "versionInfo": "v1.0.1-vault-7", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:hcl:v1.0.1-vault-7:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/hcl@v1.0.1-vault-7"}]}, {"name": "github.com/hashicorp/hcl", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-999bbc4d5a4e5672", "versionInfo": "v1.0.1-vault-7", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:hcl:v1.0.1-vault-7:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/hcl@v1.0.1-vault-7"}]}, {"name": "github.com/hashicorp/hcl/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-e843ca0a7a8cdac3", "versionInfo": "v2.18.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:hcl\\/v2:v2.18.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/hcl@v2.18.1#v2"}]}, {"name": "github.com/hashicorp/hcl/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-f818ae593686b975", "versionInfo": "v2.18.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:hcl\\/v2:v2.18.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/hcl@v2.18.1#v2"}]}, {"name": "github.com/huandu/xstrings", "SPDXID": "SPDXRef-Package-go-module-github.com-huandu-xstrings-28513728da5fae88", "versionInfo": "v1.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:huandu:xstrings:v1.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/huandu/xstrings@v1.5.0"}]}, {"name": "github.com/huandu/xstrings", "SPDXID": "SPDXRef-Package-go-module-github.com-huandu-xstrings-0634db5052d02338", "versionInfo": "v1.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:huandu:xstrings:v1.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/huandu/xstrings@v1.5.0"}]}, {"name": "github.com/inconshreveable/mousetrap", "SPDXID": "SPDXRef-Package-go-module-github.com-inconshreveable-mousetrap-df5e3f507c67348c", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/examples/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:inconshreveable:mousetrap:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/inconshreveable/mousetrap@v1.1.0"}]}, {"name": "github.com/inconshreveable/mousetrap", "SPDXID": "SPDXRef-Package-go-module-github.com-inconshreveable-mousetrap-2b6a0269dfed7ee0", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:inconshreveable:mousetrap:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/inconshreveable/mousetrap@v1.1.0"}]}, {"name": "github.com/inconshreveable/mousetrap", "SPDXID": "SPDXRef-Package-go-module-github.com-inconshreveable-mousetrap-f6300927a9f6b106", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:inconshreveable:mousetrap:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/inconshreveable/mousetrap@v1.1.0"}]}, {"name": "github.com/jcmturner/aescts/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-jcmturner-aescts-v2-a6597e99e4b0ef11", "versionInfo": "v2.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jcmturner:aescts\\/v2:v2.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jcmturner/aescts@v2.0.0#v2"}]}, {"name": "github.com/jcmturner/aescts/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-jcmturner-aescts-v2-c8cd000cd423289c", "versionInfo": "v2.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jcmturner:aescts\\/v2:v2.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jcmturner/aescts@v2.0.0#v2"}]}, {"name": "github.com/jcmturner/dnsutils/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-jcmturner-dnsutils-v2-d7ae7f9dcd69e5fa", "versionInfo": "v2.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jcmturner:dnsutils\\/v2:v2.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jcmturner/dnsutils@v2.0.0#v2"}]}, {"name": "github.com/jcmturner/dnsutils/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-jcmturner-dnsutils-v2-b97e52079da59075", "versionInfo": "v2.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jcmturner:dnsutils\\/v2:v2.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jcmturner/dnsutils@v2.0.0#v2"}]}, {"name": "github.com/jcmturner/gofork", "SPDXID": "SPDXRef-Package-go-module-github.com-jcmturner-gofork-46ab21236d97baa7", "versionInfo": "v1.7.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jcmturner:gofork:v1.7.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jcmturner/gofork@v1.7.6"}]}, {"name": "github.com/jcmturner/gofork", "SPDXID": "SPDXRef-Package-go-module-github.com-jcmturner-gofork-af63e97c1b59179e", "versionInfo": "v1.7.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jcmturner:gofork:v1.7.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jcmturner/gofork@v1.7.6"}]}, {"name": "github.com/jcmturner/goidentity/v6", "SPDXID": "SPDXRef-Package-go-module-github.com-jcmturner-goidentity-v6-48916d9c7835a5d5", "versionInfo": "v6.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jcmturner:goidentity\\/v6:v6.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jcmturner/goidentity@v6.0.1#v6"}]}, {"name": "github.com/jcmturner/goidentity/v6", "SPDXID": "SPDXRef-Package-go-module-github.com-jcmturner-goidentity-v6-a633a9894194fb36", "versionInfo": "v6.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jcmturner:goidentity\\/v6:v6.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jcmturner/goidentity@v6.0.1#v6"}]}, {"name": "github.com/jcmturner/gokrb5/v8", "SPDXID": "SPDXRef-Package-go-module-github.com-jcmturner-gokrb5-v8-c47a3788d228e4f8", "versionInfo": "v8.4.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jcmturner:gokrb5\\/v8:v8.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jcmturner/gokrb5@v8.4.4#v8"}]}, {"name": "github.com/jcmturner/gokrb5/v8", "SPDXID": "SPDXRef-Package-go-module-github.com-jcmturner-gokrb5-v8-9a23e127cb00ed1f", "versionInfo": "v8.4.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jcmturner:gokrb5\\/v8:v8.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jcmturner/gokrb5@v8.4.4#v8"}]}, {"name": "github.com/jcmturner/rpc/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-jcmturner-rpc-v2-832dd4d9e8128187", "versionInfo": "v2.0.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jcmturner:rpc\\/v2:v2.0.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jcmturner/rpc@v2.0.3#v2"}]}, {"name": "github.com/jcmturner/rpc/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-jcmturner-rpc-v2-0e9d26f9df25f829", "versionInfo": "v2.0.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jcmturner:rpc\\/v2:v2.0.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jcmturner/rpc@v2.0.3#v2"}]}, {"name": "github.com/jonboulle/clockwork", "SPDXID": "SPDXRef-Package-go-module-github.com-jonboulle-clockwork-2cfa6caaff37496a", "versionInfo": "v0.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jonboulle:clockwork:v0.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jonboulle/clockwork@v0.5.0"}]}, {"name": "github.com/jonboulle/clockwork", "SPDXID": "SPDXRef-Package-go-module-github.com-jonboulle-clockwork-008a81e8156b0c05", "versionInfo": "v0.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jonboulle:clockwork:v0.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jonboulle/clockwork@v0.5.0"}]}, {"name": "github.com/kylelemons/godebug", "SPDXID": "SPDXRef-Package-go-module-github.com-kylelemons-godebug-1508f18c3a374a13", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:kylelemons:godebug:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/kylelemons/godebug@v1.1.0"}]}, {"name": "github.com/kylelemons/godebug", "SPDXID": "SPDXRef-Package-go-module-github.com-kylelemons-godebug-054bf546a3d78ff8", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:kylelemons:godebug:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/kylelemons/godebug@v1.1.0"}]}, {"name": "github.com/lib/pq", "SPDXID": "SPDXRef-Package-go-module-github.com-lib-pq-3a27848f8a555c82", "versionInfo": "v1.12.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lib:pq:v1.12.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/lib/pq@v1.12.3"}]}, {"name": "github.com/lib/pq", "SPDXID": "SPDXRef-Package-go-module-github.com-lib-pq-6e44ce0064e1f822", "versionInfo": "v1.12.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lib:pq:v1.12.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/lib/pq@v1.12.3"}]}, {"name": "github.com/mattermost/xml-roundtrip-validator", "SPDXID": "SPDXRef-Package-go-module-github.com-mattermost-xml-roundtrip-validator-c07fe36b128dc7b5", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattermost:xml-roundtrip-validator:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattermost:xml_roundtrip_validator:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattermost/xml-roundtrip-validator@v0.1.0"}]}, {"name": "github.com/mattermost/xml-roundtrip-validator", "SPDXID": "SPDXRef-Package-go-module-github.com-mattermost-xml-roundtrip-validator-ae412c7656f2b120", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattermost:xml-roundtrip-validator:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattermost:xml_roundtrip_validator:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattermost/xml-roundtrip-validator@v0.1.0"}]}, {"name": "github.com/mattn/go-colorable", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-75ed7e22622e57c6", "versionInfo": "v0.1.15", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-colorable:v0.1.15:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_colorable:v0.1.15:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-colorable@v0.1.15"}]}, {"name": "github.com/mattn/go-colorable", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-373728952659f9dc", "versionInfo": "v0.1.15", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-colorable:v0.1.15:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_colorable:v0.1.15:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-colorable@v0.1.15"}]}, {"name": "github.com/mattn/go-isatty", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-a851e9ed7528ae45", "versionInfo": "v0.0.24", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-isatty:v0.0.24:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_isatty:v0.0.24:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-isatty@v0.0.24"}]}, {"name": "github.com/mattn/go-isatty", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-993ea55f7ccdb0d0", "versionInfo": "v0.0.24", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-isatty:v0.0.24:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_isatty:v0.0.24:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-isatty@v0.0.24"}]}, {"name": "github.com/mattn/go-runewidth", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-b7b86639fad9fc6e", "versionInfo": "v0.0.19", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-runewidth:v0.0.19:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_runewidth:v0.0.19:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-runewidth@v0.0.19"}]}, {"name": "github.com/mattn/go-runewidth", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-2424c9dad0739e6e", "versionInfo": "v0.0.19", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-runewidth:v0.0.19:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_runewidth:v0.0.19:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-runewidth@v0.0.19"}]}, {"name": "github.com/mattn/go-sqlite3", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-sqlite3-5c90825f54ef8bbb", "versionInfo": "v1.14.52", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-sqlite3:v1.14.52:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_sqlite3:v1.14.52:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-sqlite3@v1.14.52"}]}, {"name": "github.com/mattn/go-sqlite3", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-sqlite3-4c47d79d3295542f", "versionInfo": "v1.14.52", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-sqlite3:v1.14.52:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_sqlite3:v1.14.52:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-sqlite3@v1.14.52"}]}, {"name": "github.com/mitchellh/copystructure", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-a67a1cbae51586b4", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:copystructure:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/copystructure@v1.2.0"}]}, {"name": "github.com/mitchellh/copystructure", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-a08603254284a9b5", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:copystructure:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/copystructure@v1.2.0"}]}, {"name": "github.com/mitchellh/go-wordwrap", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-1b05c08544598108", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:go-wordwrap:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:go_wordwrap:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1"}]}, {"name": "github.com/mitchellh/go-wordwrap", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-e395ab6147e93076", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:go-wordwrap:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:go_wordwrap:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1"}]}, {"name": "github.com/mitchellh/mapstructure", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-mapstructure-bc9d898a9a76e666", "versionInfo": "v1.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:mapstructure:v1.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/mapstructure@v1.5.0"}]}, {"name": "github.com/mitchellh/mapstructure", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-mapstructure-d7dc97acead2de58", "versionInfo": "v1.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:mapstructure:v1.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/mapstructure@v1.5.0"}]}, {"name": "github.com/mitchellh/reflectwalk", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-4ef847efd9374369", "versionInfo": "v1.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:reflectwalk:v1.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/reflectwalk@v1.0.2"}]}, {"name": "github.com/mitchellh/reflectwalk", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-683fad220f58d434", "versionInfo": "v1.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:reflectwalk:v1.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/reflectwalk@v1.0.2"}]}, {"name": "github.com/munnerz/goautoneg", "SPDXID": "SPDXRef-Package-go-module-github.com-munnerz-goautoneg-d91f1d8d4c5a9536", "versionInfo": "v0.0.0-20191010083416-a7dc8b61c822", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:munnerz:goautoneg:v0.0.0-20191010083416-a7dc8b61c822:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822"}]}, {"name": "github.com/munnerz/goautoneg", "SPDXID": "SPDXRef-Package-go-module-github.com-munnerz-goautoneg-2d33de0c2e03c980", "versionInfo": "v0.0.0-20191010083416-a7dc8b61c822", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:munnerz:goautoneg:v0.0.0-20191010083416-a7dc8b61c822:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822"}]}, {"name": "github.com/oklog/run", "SPDXID": "SPDXRef-Package-go-module-github.com-oklog-run-3cb5c6ec62e0ec31", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oklog:run:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/oklog/run@v1.2.0"}]}, {"name": "github.com/oklog/run", "SPDXID": "SPDXRef-Package-go-module-github.com-oklog-run-24255b6b3952bced", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oklog:run:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/oklog/run@v1.2.0"}]}, {"name": "github.com/olekukonko/cat", "SPDXID": "SPDXRef-Package-go-module-github.com-olekukonko-cat-c5c6fdf28a7dd8b0", "versionInfo": "v0.0.0-20250911104152-50322a0618f6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:olekukonko:cat:v0.0.0-20250911104152-50322a0618f6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/olekukonko/cat@v0.0.0-20250911104152-50322a0618f6"}]}, {"name": "github.com/olekukonko/cat", "SPDXID": "SPDXRef-Package-go-module-github.com-olekukonko-cat-bebcd8c7e0abbf91", "versionInfo": "v0.0.0-20250911104152-50322a0618f6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:olekukonko:cat:v0.0.0-20250911104152-50322a0618f6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/olekukonko/cat@v0.0.0-20250911104152-50322a0618f6"}]}, {"name": "github.com/olekukonko/errors", "SPDXID": "SPDXRef-Package-go-module-github.com-olekukonko-errors-e7ef83ee0b787551", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:olekukonko:errors:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/olekukonko/errors@v1.1.0"}]}, {"name": "github.com/olekukonko/errors", "SPDXID": "SPDXRef-Package-go-module-github.com-olekukonko-errors-7b870bcf188ab90f", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:olekukonko:errors:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/olekukonko/errors@v1.1.0"}]}, {"name": "github.com/olekukonko/ll", "SPDXID": "SPDXRef-Package-go-module-github.com-olekukonko-ll-8326a56c7dfeea95", "versionInfo": "v0.1.4-0.20260115111900-9e59c2286df0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:olekukonko:ll:v0.1.4-0.20260115111900-9e59c2286df0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/olekukonko/ll@v0.1.4-0.20260115111900-9e59c2286df0"}]}, {"name": "github.com/olekukonko/ll", "SPDXID": "SPDXRef-Package-go-module-github.com-olekukonko-ll-8da47cec8235dbea", "versionInfo": "v0.1.4-0.20260115111900-9e59c2286df0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:olekukonko:ll:v0.1.4-0.20260115111900-9e59c2286df0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/olekukonko/ll@v0.1.4-0.20260115111900-9e59c2286df0"}]}, {"name": "github.com/olekukonko/tablewriter", "SPDXID": "SPDXRef-Package-go-module-github.com-olekukonko-tablewriter-1a08e08ac93bfdcf", "versionInfo": "v1.1.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:olekukonko:tablewriter:v1.1.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/olekukonko/tablewriter@v1.1.3"}]}, {"name": "github.com/olekukonko/tablewriter", "SPDXID": "SPDXRef-Package-go-module-github.com-olekukonko-tablewriter-547ef0cc5cc277e7", "versionInfo": "v1.1.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:olekukonko:tablewriter:v1.1.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/olekukonko/tablewriter@v1.1.3"}]}, {"name": "github.com/openbao/openbao/api/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-openbao-openbao-api-v2-1d59dca43288b181", "versionInfo": "v2.7.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:openbao:openbao\\/api\\/v2:v2.7.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/openbao/openbao@v2.7.1#api/v2"}]}, {"name": "github.com/openbao/openbao/api/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-openbao-openbao-api-v2-d816e67cf3d67e86", "versionInfo": "v2.7.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:openbao:openbao\\/api\\/v2:v2.7.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/openbao/openbao@v2.7.1#api/v2"}]}, {"name": "github.com/philhofer/fwd", "SPDXID": "SPDXRef-Package-go-module-github.com-philhofer-fwd-64659f6d69d78aab", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:philhofer:fwd:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/philhofer/fwd@v1.2.0"}]}, {"name": "github.com/philhofer/fwd", "SPDXID": "SPDXRef-Package-go-module-github.com-philhofer-fwd-dfccb2e8441322bc", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:philhofer:fwd:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/philhofer/fwd@v1.2.0"}]}, {"name": "github.com/pkg/errors", "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-errors-021b14d5957d8935", "versionInfo": "v0.9.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pkg/errors@v0.9.1"}]}, {"name": "github.com/pkg/errors", "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-errors-2f2b4a7ce7872628", "versionInfo": "v0.9.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pkg/errors@v0.9.1"}]}, {"name": "github.com/pquerna/otp", "SPDXID": "SPDXRef-Package-go-module-github.com-pquerna-otp-d29ac8b0c875db04", "versionInfo": "v1.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pquerna:otp:v1.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pquerna/otp@v1.5.0"}]}, {"name": "github.com/pquerna/otp", "SPDXID": "SPDXRef-Package-go-module-github.com-pquerna-otp-7dcbb024c570d5ba", "versionInfo": "v1.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pquerna:otp:v1.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pquerna/otp@v1.5.0"}]}, {"name": "github.com/prometheus/client_golang", "SPDXID": "SPDXRef-Package-go-module-github.com-prometheus-client-golang-810959e0f14bbea3", "versionInfo": "v1.24.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:client-golang:v1.24.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:client_golang:v1.24.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/prometheus/client_golang@v1.24.1"}]}, {"name": "github.com/prometheus/client_golang", "SPDXID": "SPDXRef-Package-go-module-github.com-prometheus-client-golang-a514cc48df50cef4", "versionInfo": "v1.24.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:client-golang:v1.24.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:client_golang:v1.24.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/prometheus/client_golang@v1.24.1"}]}, {"name": "github.com/prometheus/client_model", "SPDXID": "SPDXRef-Package-go-module-github.com-prometheus-client-model-e39788339fdca7d5", "versionInfo": "v0.6.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:client-model:v0.6.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:client_model:v0.6.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/prometheus/client_model@v0.6.2"}]}, {"name": "github.com/prometheus/client_model", "SPDXID": "SPDXRef-Package-go-module-github.com-prometheus-client-model-a37501789b93a9d0", "versionInfo": "v0.6.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:client-model:v0.6.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:client_model:v0.6.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/prometheus/client_model@v0.6.2"}]}, {"name": "github.com/prometheus/common", "SPDXID": "SPDXRef-Package-go-module-github.com-prometheus-common-5e45d1c167355b75", "versionInfo": "v0.70.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:common:v0.70.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/prometheus/common@v0.70.1"}]}, {"name": "github.com/prometheus/common", "SPDXID": "SPDXRef-Package-go-module-github.com-prometheus-common-0f58d85c7e917ff8", "versionInfo": "v0.70.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:common:v0.70.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/prometheus/common@v0.70.1"}]}, {"name": "github.com/prometheus/procfs", "SPDXID": "SPDXRef-Package-go-module-github.com-prometheus-procfs-30762ea71a8c40b0", "versionInfo": "v0.21.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:procfs:v0.21.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/prometheus/procfs@v0.21.1"}]}, {"name": "github.com/prometheus/procfs", "SPDXID": "SPDXRef-Package-go-module-github.com-prometheus-procfs-878089afee5fa76e", "versionInfo": "v0.21.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:procfs:v0.21.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/prometheus/procfs@v0.21.1"}]}, {"name": "github.com/russellhaering/goxmldsig", "SPDXID": "SPDXRef-Package-go-module-github.com-russellhaering-goxmldsig-22ba3ce070cc22c7", "versionInfo": "v1.6.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:russellhaering:goxmldsig:v1.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/russellhaering/goxmldsig@v1.6.1"}]}, {"name": "github.com/russellhaering/goxmldsig", "SPDXID": "SPDXRef-Package-go-module-github.com-russellhaering-goxmldsig-75da907dddfc0e29", "versionInfo": "v1.6.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:russellhaering:goxmldsig:v1.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/russellhaering/goxmldsig@v1.6.1"}]}, {"name": "github.com/ryanuber/go-glob", "SPDXID": "SPDXRef-Package-go-module-github.com-ryanuber-go-glob-8c4bce93abdb8637", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ryanuber:go-glob:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ryanuber:go_glob:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/ryanuber/go-glob@v1.0.0"}]}, {"name": "github.com/ryanuber/go-glob", "SPDXID": "SPDXRef-Package-go-module-github.com-ryanuber-go-glob-123848f88ea99b58", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ryanuber:go-glob:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ryanuber:go_glob:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/ryanuber/go-glob@v1.0.0"}]}, {"name": "github.com/shopspring/decimal", "SPDXID": "SPDXRef-Package-go-module-github.com-shopspring-decimal-2b841af0806f728f", "versionInfo": "v1.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:shopspring:decimal:v1.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/shopspring/decimal@v1.4.0"}]}, {"name": "github.com/shopspring/decimal", "SPDXID": "SPDXRef-Package-go-module-github.com-shopspring-decimal-19af8ea56a342c55", "versionInfo": "v1.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:shopspring:decimal:v1.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/shopspring/decimal@v1.4.0"}]}, {"name": "github.com/spf13/cast", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-cast-ff70be541f5e7ad4", "versionInfo": "v1.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:cast:v1.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/cast@v1.7.0"}]}, {"name": "github.com/spf13/cast", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-cast-fd80b2f61b0c8f6b", "versionInfo": "v1.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:cast:v1.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/cast@v1.7.0"}]}, {"name": "github.com/spf13/cobra", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-cobra-c74d20d9e8fef7db", "versionInfo": "v1.10.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/examples/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:cobra:v1.10.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/cobra@v1.10.2"}]}, {"name": "github.com/spf13/cobra", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-cobra-e7ea171e01c5d1df", "versionInfo": "v1.10.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:cobra:v1.10.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/cobra@v1.10.2"}]}, {"name": "github.com/spf13/cobra", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-cobra-aaf4307e8bf5eb4c", "versionInfo": "v1.10.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:cobra:v1.10.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/cobra@v1.10.2"}]}, {"name": "github.com/spf13/pflag", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-pflag-cc8a68434418de52", "versionInfo": "v1.0.9", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/examples/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:pflag:v1.0.9:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/pflag@v1.0.9"}]}, {"name": "github.com/spf13/pflag", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-pflag-0ce69a3b63617c8c", "versionInfo": "v1.0.9", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:pflag:v1.0.9:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/pflag@v1.0.9"}]}, {"name": "github.com/spf13/pflag", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-pflag-e5467bd9f58d3619", "versionInfo": "v1.0.9", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:pflag:v1.0.9:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/pflag@v1.0.9"}]}, {"name": "github.com/stretchr/testify", "SPDXID": "SPDXRef-Package-go-module-github.com-stretchr-testify-1c97414159f99a65", "versionInfo": "v1.12.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:stretchr:testify:v1.12.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/stretchr/testify@v1.12.1"}]}, {"name": "github.com/stretchr/testify", "SPDXID": "SPDXRef-Package-go-module-github.com-stretchr-testify-d64a25dace8d069c", "versionInfo": "v1.12.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:stretchr:testify:v1.12.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/stretchr/testify@v1.12.1"}]}, {"name": "github.com/tinylib/msgp", "SPDXID": "SPDXRef-Package-go-module-github.com-tinylib-msgp-0c9c2dc6f0281eda", "versionInfo": "v1.6.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tinylib:msgp:v1.6.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/tinylib/msgp@v1.6.4"}]}, {"name": "github.com/tinylib/msgp", "SPDXID": "SPDXRef-Package-go-module-github.com-tinylib-msgp-f8c265250f0c6293", "versionInfo": "v1.6.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tinylib:msgp:v1.6.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/tinylib/msgp@v1.6.4"}]}, {"name": "github.com/x448/float16", "SPDXID": "SPDXRef-Package-go-module-github.com-x448-float16-7fd971e925528f79", "versionInfo": "v0.8.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:x448:float16:v0.8.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/x448/float16@v0.8.4"}]}, {"name": "github.com/x448/float16", "SPDXID": "SPDXRef-Package-go-module-github.com-x448-float16-413366d78e6a286c", "versionInfo": "v0.8.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:x448:float16:v0.8.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/x448/float16@v0.8.4"}]}, {"name": "github.com/zclconf/go-cty", "SPDXID": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-6521de1428969234", "versionInfo": "v1.14.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zclconf:go-cty:v1.14.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zclconf:go_cty:v1.14.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/zclconf/go-cty@v1.14.4"}]}, {"name": "github.com/zclconf/go-cty", "SPDXID": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-de8cf9e8c7807317", "versionInfo": "v1.14.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zclconf:go-cty:v1.14.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zclconf:go_cty:v1.14.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/zclconf/go-cty@v1.14.4"}]}, {"name": "github.com/zclconf/go-cty-yaml", "SPDXID": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-yaml-19344e95f8e304db", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zclconf:go-cty-yaml:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zclconf:go_cty_yaml:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/zclconf/go-cty-yaml@v1.1.0"}]}, {"name": "github.com/zclconf/go-cty-yaml", "SPDXID": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-yaml-1678a7e36b57a46e", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zclconf:go-cty-yaml:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zclconf:go_cty_yaml:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/zclconf/go-cty-yaml@v1.1.0"}]}, {"name": "github/codeql-action/upload-sarif", "SPDXID": "SPDXRef-Package-github-action-github-codeql-action-upload-sarif-0fc2ddf000b03f47", "versionInfo": "v3.29.5", "supplier": "Organization: github", "originator": "Organization: github", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /dex-2.46.0/.github/workflows/analysis-scorecard.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql-action\\/upload-sarif:github\\/codeql-action\\/upload-sarif:v3.29.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql-action\\/upload-sarif:github\\/codeql_action\\/upload_sarif:v3.29.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql_action\\/upload_sarif:github\\/codeql-action\\/upload-sarif:v3.29.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql_action\\/upload_sarif:github\\/codeql_action\\/upload_sarif:v3.29.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql-action\\/upload:github\\/codeql-action\\/upload-sarif:v3.29.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql-action\\/upload:github\\/codeql_action\\/upload_sarif:v3.29.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql_action\\/upload:github\\/codeql-action\\/upload-sarif:v3.29.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql_action\\/upload:github\\/codeql_action\\/upload_sarif:v3.29.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/upload-sarif:v3.29.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/upload_sarif:v3.29.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/github/codeql-action@v3.29.5#upload-sarif"}]}, {"name": "github/codeql-action/upload-sarif", "SPDXID": "SPDXRef-Package-github-action-github-codeql-action-upload-sarif-da5634acc9854a39", "versionInfo": "v3.29.5", "supplier": "Organization: github", "originator": "Organization: github", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /dex-2.46.0/.github/workflows/artifacts.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql-action\\/upload-sarif:github\\/codeql-action\\/upload-sarif:v3.29.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql-action\\/upload-sarif:github\\/codeql_action\\/upload_sarif:v3.29.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql_action\\/upload_sarif:github\\/codeql-action\\/upload-sarif:v3.29.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql_action\\/upload_sarif:github\\/codeql_action\\/upload_sarif:v3.29.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql-action\\/upload:github\\/codeql-action\\/upload-sarif:v3.29.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql-action\\/upload:github\\/codeql_action\\/upload_sarif:v3.29.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql_action\\/upload:github\\/codeql-action\\/upload-sarif:v3.29.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql_action\\/upload:github\\/codeql_action\\/upload_sarif:v3.29.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/upload-sarif:v3.29.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/upload_sarif:v3.29.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/github/codeql-action@v3.29.5#upload-sarif"}]}, {"name": "go.etcd.io/etcd/api/v3", "SPDXID": "SPDXRef-Package-go-module-go.etcd.io-etcd-api-v3-835ea6f00c58b847", "versionInfo": "v3.7.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:etcd:api\\/v3:v3.7.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.etcd.io/etcd/api@v3.7.2#v3"}]}, {"name": "go.etcd.io/etcd/api/v3", "SPDXID": "SPDXRef-Package-go-module-go.etcd.io-etcd-api-v3-05dd5f11dc1d3b23", "versionInfo": "v3.7.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:etcd:api\\/v3:v3.7.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.etcd.io/etcd/api@v3.7.2#v3"}]}, {"name": "go.etcd.io/etcd/client/pkg/v3", "SPDXID": "SPDXRef-Package-go-module-go.etcd.io-etcd-client-pkg-v3-f2581879a48e7c7e", "versionInfo": "v3.7.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:etcd:client\\/pkg\\/v3:v3.7.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.etcd.io/etcd/client@v3.7.2#pkg/v3"}]}, {"name": "go.etcd.io/etcd/client/pkg/v3", "SPDXID": "SPDXRef-Package-go-module-go.etcd.io-etcd-client-pkg-v3-be8c25b1e7b39f24", "versionInfo": "v3.7.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:etcd:client\\/pkg\\/v3:v3.7.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.etcd.io/etcd/client@v3.7.2#pkg/v3"}]}, {"name": "go.etcd.io/etcd/client/v3", "SPDXID": "SPDXRef-Package-go-module-go.etcd.io-etcd-client-v3-65926145b687f438", "versionInfo": "v3.7.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:etcd:client\\/v3:v3.7.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.etcd.io/etcd/client@v3.7.2#v3"}]}, {"name": "go.etcd.io/etcd/client/v3", "SPDXID": "SPDXRef-Package-go-module-go.etcd.io-etcd-client-v3-5f8a1aca09840598", "versionInfo": "v3.7.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:etcd:client\\/v3:v3.7.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.etcd.io/etcd/client@v3.7.2#v3"}]}, {"name": "go.opentelemetry.io/auto/sdk", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-f9dd1fc14784caaf", "versionInfo": "v1.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:auto:sdk:v1.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1"}]}, {"name": "go.opentelemetry.io/auto/sdk", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-a00544d9cf935bfa", "versionInfo": "v1.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:auto:sdk:v1.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1"}]}, {"name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-b83d91aaa1a3b761", "versionInfo": "v0.69.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/otelhttp:v0.69.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation@v0.69.0#net/http/otelhttp"}]}, {"name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-afa40991728a2ca2", "versionInfo": "v0.69.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/otelhttp:v0.69.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation@v0.69.0#net/http/otelhttp"}]}, {"name": "go.opentelemetry.io/otel", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-4396ef269c0fff20", "versionInfo": "v1.45.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel@v1.45.0"}]}, {"name": "go.opentelemetry.io/otel", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-f27770650f676674", "versionInfo": "v1.45.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel@v1.45.0"}]}, {"name": "go.opentelemetry.io/otel/metric", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-8fea4eb90b377a38", "versionInfo": "v1.45.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:metric:v1.45.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/metric@v1.45.0"}]}, {"name": "go.opentelemetry.io/otel/metric", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-f9a727401b6a9791", "versionInfo": "v1.45.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:metric:v1.45.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/metric@v1.45.0"}]}, {"name": "go.opentelemetry.io/otel/trace", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-dea5341837517a64", "versionInfo": "v1.45.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:trace:v1.45.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/trace@v1.45.0"}]}, {"name": "go.opentelemetry.io/otel/trace", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-8e426af775fa3244", "versionInfo": "v1.45.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:trace:v1.45.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/trace@v1.45.0"}]}, {"name": "go.uber.org/multierr", "SPDXID": "SPDXRef-Package-go-module-go.uber.org-multierr-9f9321b6484ab349", "versionInfo": "v1.11.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.uber.org/multierr@v1.11.0"}]}, {"name": "go.uber.org/multierr", "SPDXID": "SPDXRef-Package-go-module-go.uber.org-multierr-ef196337207eb800", "versionInfo": "v1.11.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.uber.org/multierr@v1.11.0"}]}, {"name": "go.uber.org/zap", "SPDXID": "SPDXRef-Package-go-module-go.uber.org-zap-6854f837c762d43b", "versionInfo": "v1.27.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.uber.org/zap@v1.27.1"}]}, {"name": "go.uber.org/zap", "SPDXID": "SPDXRef-Package-go-module-go.uber.org-zap-e05cb2d4583bc5be", "versionInfo": "v1.27.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.uber.org/zap@v1.27.1"}]}, {"name": "go.yaml.in/yaml/v3", "SPDXID": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-0a7b1f6b0e53a9d2", "versionInfo": "v3.0.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml:v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.yaml.in/yaml/v3@v3.0.5"}]}, {"name": "go.yaml.in/yaml/v3", "SPDXID": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-4fc93c87aeebc64b", "versionInfo": "v3.0.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml:v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.yaml.in/yaml/v3@v3.0.5"}]}, {"name": "golang.org/x/crypto", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-crypto-6907cc69c8a451c3", "versionInfo": "v0.57.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/examples/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:ssh:v0.57.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/crypto@v0.57.0"}]}, {"name": "golang.org/x/crypto", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-crypto-41e8cdd8f0d5486d", "versionInfo": "v0.57.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:ssh:v0.57.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/crypto@v0.57.0"}]}, {"name": "golang.org/x/crypto", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-crypto-4a7180a3454dcfdc", "versionInfo": "v0.57.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:ssh:v0.57.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/crypto@v0.57.0"}]}, {"name": "golang.org/x/exp", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-exp-f2f0e8a92202b8bb", "versionInfo": "v0.0.0-20240823005443-9b4947da3948", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/exp:v0.0.0-20240823005443-9b4947da3948:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/exp@v0.0.0-20240823005443-9b4947da3948"}]}, {"name": "golang.org/x/exp", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-exp-2cd0d49d181ff358", "versionInfo": "v0.0.0-20240823005443-9b4947da3948", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/exp:v0.0.0-20240823005443-9b4947da3948:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/exp@v0.0.0-20240823005443-9b4947da3948"}]}, {"name": "golang.org/x/mod", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-mod-6e91029e7c115a69", "versionInfo": "v0.41.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/mod:v0.41.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/mod@v0.41.0"}]}, {"name": "golang.org/x/mod", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-mod-56d232e7120c3a8b", "versionInfo": "v0.41.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/mod:v0.41.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/mod@v0.41.0"}]}, {"name": "golang.org/x/net", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-net-f5ecc134d333a099", "versionInfo": "v0.57.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/api/v2/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:networking:v0.57.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/net@v0.57.0"}]}, {"name": "golang.org/x/net", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-net-7c1bba4d36bdb7ac", "versionInfo": "v0.58.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/examples/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:networking:v0.58.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/net@v0.58.0"}]}, {"name": "golang.org/x/net", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-net-d6d9650a5d10d363", "versionInfo": "v0.59.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:networking:v0.59.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/net@v0.59.0"}]}, {"name": "golang.org/x/net", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-net-50bf6051e43e2577", "versionInfo": "v0.59.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:networking:v0.59.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/net@v0.59.0"}]}, {"name": "golang.org/x/oauth2", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-oauth2-4f5748c31ea973f6", "versionInfo": "v0.37.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/examples/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/oauth2:v0.37.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/oauth2@v0.37.0"}]}, {"name": "golang.org/x/oauth2", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-oauth2-e473e8d0983fdebc", "versionInfo": "v0.37.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/oauth2:v0.37.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/oauth2@v0.37.0"}]}, {"name": "golang.org/x/oauth2", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-oauth2-2e730bac8336b8f7", "versionInfo": "v0.37.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/oauth2:v0.37.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/oauth2@v0.37.0"}]}, {"name": "golang.org/x/sync", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sync-eb80253a3d4695a2", "versionInfo": "v0.23.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sync:v0.23.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sync@v0.23.0"}]}, {"name": "golang.org/x/sync", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sync-1c59d62db54de586", "versionInfo": "v0.23.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sync:v0.23.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sync@v0.23.0"}]}, {"name": "golang.org/x/sys", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sys-845a5a9f8e5845b3", "versionInfo": "v0.47.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/api/v2/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sys:v0.47.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sys@v0.47.0"}]}, {"name": "golang.org/x/sys", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sys-8ff48d2274ef05f6", "versionInfo": "v0.48.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/examples/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sys:v0.48.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sys@v0.48.0"}]}, {"name": "golang.org/x/sys", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sys-2b6a423eb5109854", "versionInfo": "v0.48.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sys:v0.48.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sys@v0.48.0"}]}, {"name": "golang.org/x/sys", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sys-22bf94b873e909e4", "versionInfo": "v0.48.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sys:v0.48.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sys@v0.48.0"}]}, {"name": "golang.org/x/text", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-text-e510c6d0e2e8ee78", "versionInfo": "v0.40.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/api/v2/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:text:v0.40.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/text@v0.40.0"}]}, {"name": "golang.org/x/text", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-text-ff0cc4a1edecfddc", "versionInfo": "v0.42.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/examples/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:text:v0.42.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/text@v0.42.0"}]}, {"name": "golang.org/x/text", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-text-48dc84bfeb149d32", "versionInfo": "v0.42.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:text:v0.42.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/text@v0.42.0"}]}, {"name": "golang.org/x/text", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-text-8946d0e2b7ce5ab6", "versionInfo": "v0.42.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:text:v0.42.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/text@v0.42.0"}]}, {"name": "golang.org/x/time", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-time-6a3bdc5173ed69ad", "versionInfo": "v0.16.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/time:v0.16.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/time@v0.16.0"}]}, {"name": "golang.org/x/time", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-time-90e57fc7c651498e", "versionInfo": "v0.16.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/time:v0.16.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/time@v0.16.0"}]}, {"name": "golang.org/x/tools", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-tools-fc7f3049d5dd0b3c", "versionInfo": "v0.49.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/tools:v0.49.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/tools@v0.49.0"}]}, {"name": "golang.org/x/tools", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-tools-1d0c1f0fc356ce03", "versionInfo": "v0.49.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/tools:v0.49.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/tools@v0.49.0"}]}, {"name": "golang.org/x/tools/go/packages/packagestest", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-tools-go-packages-packagestest-b45858aab8ad58db", "versionInfo": "v0.1.1-deprecated", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/tools\\/go\\/packages\\/packagestest:v0.1.1-deprecated:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/tools@v0.1.1-deprecated#go/packages/packagestest"}]}, {"name": "golang.org/x/tools/go/packages/packagestest", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-tools-go-packages-packagestest-480d0f2ee6fb9912", "versionInfo": "v0.1.1-deprecated", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/tools\\/go\\/packages\\/packagestest:v0.1.1-deprecated:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/tools@v0.1.1-deprecated#go/packages/packagestest"}]}, {"name": "google.golang.org/api", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-api-0924b8d1cb38e654", "versionInfo": "v0.300.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:api:v0.300.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/api@v0.300.0"}]}, {"name": "google.golang.org/api", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-api-57b3d177fae051c4", "versionInfo": "v0.300.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:api:v0.300.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/api@v0.300.0"}]}, {"name": "google.golang.org/genproto/googleapis/api", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-570c05adfc419665", "versionInfo": "v0.0.0-20260715232425-e75dac1f907d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260715232425-e75dac1f907d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260715232425-e75dac1f907d#api"}]}, {"name": "google.golang.org/genproto/googleapis/api", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-d6e204d5b39cc3d9", "versionInfo": "v0.0.0-20260715232425-e75dac1f907d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260715232425-e75dac1f907d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260715232425-e75dac1f907d#api"}]}, {"name": "google.golang.org/genproto/googleapis/rpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-a9c9205e4790f5e8", "versionInfo": "v0.0.0-20260706201446-f0a921348800", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/api/v2/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260706201446-f0a921348800:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260706201446-f0a921348800#rpc"}]}, {"name": "google.golang.org/genproto/googleapis/rpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-020cde73632f458b", "versionInfo": "v0.0.0-20260706201446-f0a921348800", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/examples/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260706201446-f0a921348800:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260706201446-f0a921348800#rpc"}]}, {"name": "google.golang.org/genproto/googleapis/rpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-397f8dbef55bcd1c", "versionInfo": "v0.0.0-20260921155816-b14227669459", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260921155816-b14227669459:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260921155816-b14227669459#rpc"}]}, {"name": "google.golang.org/genproto/googleapis/rpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-28fa02a12896cbbd", "versionInfo": "v0.0.0-20260921155816-b14227669459", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260921155816-b14227669459:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260921155816-b14227669459#rpc"}]}, {"name": "google.golang.org/grpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-grpc-1e540524363c17ee", "versionInfo": "v1.84.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/api/v2/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:grpc:v1.84.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/grpc@v1.84.0"}]}, {"name": "google.golang.org/grpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-grpc-fcc2351cf40fd420", "versionInfo": "v1.84.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/examples/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:grpc:v1.84.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/grpc@v1.84.0"}]}, {"name": "google.golang.org/grpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-grpc-28648b132f1b30a4", "versionInfo": "v1.84.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:grpc:v1.84.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/grpc@v1.84.0"}]}, {"name": "google.golang.org/grpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-grpc-54bcc746f2ab7987", "versionInfo": "v1.84.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:grpc:v1.84.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/grpc@v1.84.0"}]}, {"name": "google.golang.org/protobuf", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-protobuf-262f1f13b256c486", "versionInfo": "v1.36.12", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/api/v2/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:protobuf:v1.36.12:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/protobuf@v1.36.12"}]}, {"name": "google.golang.org/protobuf", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-protobuf-62dec156dcfc8719", "versionInfo": "v1.36.12", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/examples/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:protobuf:v1.36.12:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/protobuf@v1.36.12"}]}, {"name": "google.golang.org/protobuf", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-protobuf-3fa22a51053bed05", "versionInfo": "v1.36.12", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:protobuf:v1.36.12:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/protobuf@v1.36.12"}]}, {"name": "google.golang.org/protobuf", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-protobuf-0055873c0ce1a39b", "versionInfo": "v1.36.12", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:protobuf:v1.36.12:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/protobuf@v1.36.12"}]}, {"name": "gopkg.in/yaml.v2", "SPDXID": "SPDXRef-Package-go-module-gopkg.in-yaml.v2-81ad48257d4a7210", "versionInfo": "v2.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/gopkg.in/yaml.v2@v2.4.0"}]}, {"name": "gopkg.in/yaml.v2", "SPDXID": "SPDXRef-Package-go-module-gopkg.in-yaml.v2-15848299ac4cecd4", "versionInfo": "v2.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/gopkg.in/yaml.v2@v2.4.0"}]}, {"name": "gopkg.in/yaml.v3", "SPDXID": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-c278a7951f223179", "versionInfo": "v3.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /dex-2.46.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml_project:yaml:v3.0.1:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/gopkg.in/yaml.v3@v3.0.1"}]}, {"name": "gopkg.in/yaml.v3", "SPDXID": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-716c668b92999095", "versionInfo": "v3.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml_project:yaml:v3.0.1:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/gopkg.in/yaml.v3@v3.0.1"}]}, {"name": "haya14busa/action-cond", "SPDXID": "SPDXRef-Package-github-action-haya14busa-action-cond-09bbb5c3014d98aa", "versionInfo": "v1.2.1", "supplier": "Organization: haya14busa", "originator": "Organization: haya14busa", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /dex-2.46.0/.github/workflows/artifacts.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:haya14busa\\/action-cond:haya14busa\\/action-cond:v1.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:haya14busa\\/action-cond:haya14busa\\/action_cond:v1.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:haya14busa\\/action_cond:haya14busa\\/action-cond:v1.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:haya14busa\\/action_cond:haya14busa\\/action_cond:v1.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:haya14busa\\/action:haya14busa\\/action-cond:v1.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:haya14busa\\/action:haya14busa\\/action_cond:v1.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/haya14busa/action-cond@v1.2.1"}]}, {"name": "helm/kind-action", "SPDXID": "SPDXRef-Package-github-action-helm-kind-action-3df1df68d414b75b", "versionInfo": "v1.15.0", "supplier": "Organization: helm", "originator": "Organization: helm", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /dex-2.46.0/.github/workflows/ci.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:helm\\/kind-action:helm\\/kind-action:v1.15.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:helm\\/kind-action:helm\\/kind_action:v1.15.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:helm\\/kind_action:helm\\/kind-action:v1.15.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:helm\\/kind_action:helm\\/kind_action:v1.15.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:helm\\/kind:helm\\/kind-action:v1.15.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:helm\\/kind:helm\\/kind_action:v1.15.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/helm/kind-action@v1.15.0"}]}, {"name": "mheap/github-action-required-labels", "SPDXID": "SPDXRef-Package-github-action-mheap-github-action-required-labels-718b9f7135e38ad3", "versionInfo": "v5.6.0", "supplier": "Organization: mheap", "originator": "Organization: mheap", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /dex-2.46.0/.github/workflows/checks.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mheap\\/github-action-required-labels:mheap\\/github-action-required-labels:v5.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mheap\\/github-action-required-labels:mheap\\/github_action_required_labels:v5.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mheap\\/github_action_required_labels:mheap\\/github-action-required-labels:v5.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mheap\\/github_action_required_labels:mheap\\/github_action_required_labels:v5.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mheap\\/github-action-required:mheap\\/github-action-required-labels:v5.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mheap\\/github-action-required:mheap\\/github_action_required_labels:v5.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mheap\\/github_action_required:mheap\\/github-action-required-labels:v5.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mheap\\/github_action_required:mheap\\/github_action_required_labels:v5.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mheap\\/github-action:mheap\\/github-action-required-labels:v5.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mheap\\/github-action:mheap\\/github_action_required_labels:v5.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mheap\\/github_action:mheap\\/github-action-required-labels:v5.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mheap\\/github_action:mheap\\/github_action_required_labels:v5.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mheap\\/github:mheap\\/github-action-required-labels:v5.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mheap\\/github:mheap\\/github_action_required_labels:v5.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/mheap/github-action-required-labels@v5.6.0"}]}, {"name": "oras-project/setup-oras", "SPDXID": "SPDXRef-Package-github-action-oras-project-setup-oras-5961ae78a62c1e51", "versionInfo": "v2.0.2", "supplier": "Organization: oras-project", "originator": "Organization: oras-project", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /dex-2.46.0/.github/workflows/trivydb-cache.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oras-project\\/setup-oras:oras-project\\/setup-oras:v2.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oras-project\\/setup-oras:oras_project\\/setup_oras:v2.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oras_project\\/setup_oras:oras-project\\/setup-oras:v2.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oras_project\\/setup_oras:oras_project\\/setup_oras:v2.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oras-project\\/setup:oras-project\\/setup-oras:v2.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oras-project\\/setup:oras_project\\/setup_oras:v2.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oras_project\\/setup:oras-project\\/setup-oras:v2.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oras_project\\/setup:oras_project\\/setup_oras:v2.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oras:oras-project\\/setup-oras:v2.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oras:oras_project\\/setup_oras:v2.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/oras-project/setup-oras@v2.0.2"}]}, {"name": "ossf/scorecard-action", "SPDXID": "SPDXRef-Package-github-action-ossf-scorecard-action-e4c6a6acab396d23", "versionInfo": "v2.4.4", "supplier": "Organization: ossf", "originator": "Organization: ossf", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /dex-2.46.0/.github/workflows/analysis-scorecard.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ossf\\/scorecard-action:ossf\\/scorecard-action:v2.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ossf\\/scorecard-action:ossf\\/scorecard_action:v2.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ossf\\/scorecard_action:ossf\\/scorecard-action:v2.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ossf\\/scorecard_action:ossf\\/scorecard_action:v2.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ossf\\/scorecard:ossf\\/scorecard-action:v2.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ossf\\/scorecard:ossf\\/scorecard_action:v2.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/ossf/scorecard-action@v2.4.4"}]}, {"name": "sigstore/cosign-installer", "SPDXID": "SPDXRef-Package-github-action-sigstore-cosign-installer-731c0eff1fc86911", "versionInfo": "v4.1.2", "supplier": "Organization: sigstore", "originator": "Organization: sigstore", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /dex-2.46.0/.github/workflows/artifacts.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sigstore\\/cosign-installer:sigstore\\/cosign-installer:v4.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sigstore\\/cosign-installer:sigstore\\/cosign_installer:v4.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sigstore\\/cosign_installer:sigstore\\/cosign-installer:v4.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sigstore\\/cosign_installer:sigstore\\/cosign_installer:v4.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sigstore\\/cosign:sigstore\\/cosign-installer:v4.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sigstore\\/cosign:sigstore\\/cosign_installer:v4.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/sigstore/cosign-installer@v4.1.2"}]}, {"name": "rpm-extracted/dex-2.46.0-0.1.hum1.src", "SPDXID": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "dex", "SPDXID": "SPDXRef-Package-rpm-dex-f401416d40ff6a46", "versionInfo": "2.46.0-0.1.hum1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from RPM DB: /usr/lib/debug/usr/bin/dex-2.46.0-0.1.hum1.aarch64.debug", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dex:dex:2.46.0-0.1.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/hummingbird/dex@2.46.0-0.1.hum1?distro=hummingbird-1"}]}, {"name": "rpm-extracted/dex-debuginfo-2.46.0-0.1.hum1.aarch64", "SPDXID": "SPDXRef-Directory-Root-dex-debuginfo-2.46.0-0.1.hum1.aarch64", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "rpm-extracted/dex-debugsource-2.46.0-0.1.hum1.aarch64", "SPDXID": "SPDXRef-Directory-Root-dex-debugsource-2.46.0-0.1.hum1.aarch64", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "./api/v2", "SPDXID": "SPDXRef-Package-go-module-.-api-v2-cbf365d15e0d4a6e", "versionInfo": "UNKNOWN", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:api:v2:*:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/./api/v2"}]}, {"name": "ariga.io/atlas", "SPDXID": "SPDXRef-Package-go-module-ariga.io-atlas-8b3b0bc45a315f19", "versionInfo": "v0.36.2-0.20250730182955-2c6300d0a3e1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/ariga.io/atlas@v0.36.2-0.20250730182955-2c6300d0a3e1"}]}, {"name": "cloud.google.com/go/auth", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-auth-e223b74fa8687bc2", "versionInfo": "v0.24.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:auth:v0.24.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/auth@v0.24.0"}]}, {"name": "cloud.google.com/go/auth/oauth2adapt", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-a08fe66fc9539613", "versionInfo": "v0.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:auth\\/oauth2adapt:v0.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/auth@v0.3.0#oauth2adapt"}]}, {"name": "cloud.google.com/go/compute/metadata", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-3fe1e00e2b4234f8", "versionInfo": "v0.10.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:compute\\/metadata:v0.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/compute@v0.10.0#metadata"}]}, {"name": "dario.cat/mergo", "SPDXID": "SPDXRef-Package-go-module-dario.cat-mergo-b427ceac60915ba8", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/dario.cat/mergo@v1.0.1"}]}, {"name": "dex", "SPDXID": "SPDXRef-Package-rpm-dex-2062246074bdc5c6", "versionInfo": "2.46.0-0.1.hum1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from RPM DB: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dex:dex:2.46.0-0.1.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/hummingbird/dex@2.46.0-0.1.hum1?distro=hummingbird-1"}]}, {"name": "entgo.io/ent", "SPDXID": "SPDXRef-Package-go-module-entgo.io-ent-84ed5033650a0690", "versionInfo": "v0.14.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/entgo.io/ent@v0.14.6"}]}, {"name": "filippo.io/edwards25519", "SPDXID": "SPDXRef-Package-go-module-filippo.io-edwards25519-ee5250f77e3ed14e", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/filippo.io/edwards25519@v1.2.0"}]}, {"name": "github.com/AppsFlyer/go-sundheit", "SPDXID": "SPDXRef-Package-go-module-github.com-AppsFlyer-go-sundheit-321a1a5ed143c4c0", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:AppsFlyer:go-sundheit:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:AppsFlyer:go_sundheit:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/AppsFlyer/go-sundheit@v0.6.0"}]}, {"name": "github.com/Azure/go-ntlmssp", "SPDXID": "SPDXRef-Package-go-module-github.com-Azure-go-ntlmssp-8c390b081b3d873d", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Azure:go-ntlmssp:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Azure:go_ntlmssp:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Azure/go-ntlmssp@v0.1.1"}]}, {"name": "github.com/Masterminds/goutils", "SPDXID": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-757c3b456add09b0", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:goutils_project:goutils:v1.1.1:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Masterminds/goutils@v1.1.1"}]}, {"name": "github.com/Masterminds/semver", "SPDXID": "SPDXRef-Package-go-module-github.com-Masterminds-semver-0eb994ebe34e7363", "versionInfo": "v1.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Masterminds:semver:v1.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Masterminds/semver@v1.5.0"}]}, {"name": "github.com/Masterminds/semver/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-d58c20d03ac97133", "versionInfo": "v3.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Masterminds:semver\\/v3:v3.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Masterminds/semver@v3.3.0#v3"}]}, {"name": "github.com/Masterminds/sprig/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-147c9550c47d43f1", "versionInfo": "v3.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Masterminds:sprig\\/v3:v3.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Masterminds/sprig@v3.3.0#v3"}]}, {"name": "github.com/agext/levenshtein", "SPDXID": "SPDXRef-Package-go-module-github.com-agext-levenshtein-36be5403aadd8273", "versionInfo": "v1.2.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:agext:levenshtein:v1.2.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/agext/levenshtein@v1.2.3"}]}, {"name": "github.com/apparentlymart/go-textseg/v15", "SPDXID": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-1f88fd07d5eae0b5", "versionInfo": "v15.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apparentlymart:go-textseg\\/v15:v15.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apparentlymart:go_textseg\\/v15:v15.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/apparentlymart/go-textseg@v15.0.0#v15"}]}, {"name": "github.com/beevik/etree", "SPDXID": "SPDXRef-Package-go-module-github.com-beevik-etree-9f7ee60051291021", "versionInfo": "v1.8.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:beevik:etree:v1.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/beevik/etree@v1.8.1"}]}, {"name": "github.com/beorn7/perks", "SPDXID": "SPDXRef-Package-go-module-github.com-beorn7-perks-d906ccad8d24cb14", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:beorn7:perks:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/beorn7/perks@v1.0.1"}]}, {"name": "github.com/bmatcuk/doublestar", "SPDXID": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-db3950f37869d400", "versionInfo": "v1.3.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bmatcuk:doublestar:v1.3.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bmatcuk/doublestar@v1.3.4"}]}, {"name": "github.com/boombuler/barcode", "SPDXID": "SPDXRef-Package-go-module-github.com-boombuler-barcode-87224cd6cd6f65ed", "versionInfo": "v1.0.1-0.20190219062509-6c824513bacc", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:boombuler:barcode:v1.0.1-0.20190219062509-6c824513bacc:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/boombuler/barcode@v1.0.1-0.20190219062509-6c824513bacc"}]}, {"name": "github.com/cenkalti/backoff/v5", "SPDXID": "SPDXRef-Package-go-module-github.com-cenkalti-backoff-v5-3a2bd314924ed96d", "versionInfo": "v5.0.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cenkalti:backoff\\/v5:v5.0.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cenkalti/backoff@v5.0.3#v5"}]}, {"name": "github.com/cespare/xxhash/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-e892a89a03b2718c", "versionInfo": "v2.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cespare/xxhash@v2.3.0#v2"}]}, {"name": "github.com/coreos/go-oidc/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-coreos-go-oidc-v3-c6fef63c4b574c19", "versionInfo": "v3.21.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go-oidc\\/v3:v3.21.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go_oidc\\/v3:v3.21.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/coreos/go-oidc@v3.21.0#v3"}]}, {"name": "github.com/coreos/go-semver", "SPDXID": "SPDXRef-Package-go-module-github.com-coreos-go-semver-a2f0c8181fcf01d4", "versionInfo": "v0.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go-semver:v0.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go_semver:v0.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/coreos/go-semver@v0.3.1"}]}, {"name": "github.com/coreos/go-systemd/v22", "SPDXID": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-v22-c8a056c81c003d13", "versionInfo": "v22.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go-systemd\\/v22:v22.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go_systemd\\/v22:v22.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/coreos/go-systemd@v22.7.0#v22"}]}, {"name": "github.com/dexidp/dex", "SPDXID": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "versionInfo": "v2.46.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dexidp:dex:v2.46.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/dexidp/dex@v2.46.0"}]}, {"name": "github.com/felixge/httpsnoop", "SPDXID": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-9d96567a5e0f2863", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:felixge:httpsnoop:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/felixge/httpsnoop@v1.1.0"}]}, {"name": "github.com/fsnotify/fsnotify", "SPDXID": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-799427d636bf0294", "versionInfo": "v1.10.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fsnotify:fsnotify:v1.10.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fsnotify/fsnotify@v1.10.1"}]}, {"name": "github.com/fxamacker/cbor/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-fxamacker-cbor-v2-596006188f5063a7", "versionInfo": "v2.9.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fxamacker:cbor\\/v2:v2.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fxamacker/cbor@v2.9.4#v2"}]}, {"name": "github.com/ghodss/yaml", "SPDXID": "SPDXRef-Package-go-module-github.com-ghodss-yaml-ff7b88d947ebddf7", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ghodss:yaml:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/ghodss/yaml@v1.0.0"}]}, {"name": "github.com/go-asn1-ber/asn1-ber", "SPDXID": "SPDXRef-Package-go-module-github.com-go-asn1-ber-asn1-ber-5afbf92933833c57", "versionInfo": "v1.5.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-asn1-ber:asn1-ber:v1.5.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-asn1-ber:asn1_ber:v1.5.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_asn1_ber:asn1-ber:v1.5.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_asn1_ber:asn1_ber:v1.5.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-asn1:asn1-ber:v1.5.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-asn1:asn1_ber:v1.5.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_asn1:asn1-ber:v1.5.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_asn1:asn1_ber:v1.5.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:asn1-ber:v1.5.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:asn1_ber:v1.5.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-asn1-ber/asn1-ber@v1.5.8"}]}, {"name": "github.com/go-jose/go-jose/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-da334fcc660bdaa5", "versionInfo": "v4.1.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go-jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go_jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go-jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go_jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-jose/go-jose@v4.1.5#v4"}]}, {"name": "github.com/go-ldap/ldap/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-go-ldap-ldap-v3-fc174082cfa1ede8", "versionInfo": "v3.4.14", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-ldap:ldap\\/v3:v3.4.14:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_ldap:ldap\\/v3:v3.4.14:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:ldap\\/v3:v3.4.14:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-ldap/ldap@v3.4.14#v3"}]}, {"name": "github.com/go-logr/logr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-logr-038da0ea77c7d7cf", "versionInfo": "v1.4.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:logr:v1.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:logr:v1.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:logr:v1.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/logr@v1.4.4"}]}, {"name": "github.com/go-logr/stdr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-stdr-de83778242e77384", "versionInfo": "v1.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/stdr@v1.2.2"}]}, {"name": "github.com/go-openapi/inflect", "SPDXID": "SPDXRef-Package-go-module-github.com-go-openapi-inflect-a0117dc3ddbb9dd9", "versionInfo": "v0.19.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-openapi:inflect:v0.19.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_openapi:inflect:v0.19.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:inflect:v0.19.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-openapi/inflect@v0.19.0"}]}, {"name": "github.com/go-sql-driver/mysql", "SPDXID": "SPDXRef-Package-go-module-github.com-go-sql-driver-mysql-fbf99dc28c73ba2f", "versionInfo": "v1.10.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-sql-driver:mysql:v1.10.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_sql_driver:mysql:v1.10.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-sql:mysql:v1.10.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_sql:mysql:v1.10.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:mysql:v1.10.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-sql-driver/mysql@v1.10.1"}]}, {"name": "github.com/go-viper/mapstructure/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-60c34d277a360af3", "versionInfo": "v2.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-viper/mapstructure@v2.5.0#v2"}]}, {"name": "github.com/go-webauthn/webauthn", "SPDXID": "SPDXRef-Package-go-module-github.com-go-webauthn-webauthn-b212d11febc37490", "versionInfo": "v0.18.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-webauthn:webauthn:v0.18.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_webauthn:webauthn:v0.18.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:webauthn:v0.18.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-webauthn/webauthn@v0.18.2"}]}, {"name": "github.com/go-webauthn/x", "SPDXID": "SPDXRef-Package-go-module-github.com-go-webauthn-x-ded9d3e734edb535", "versionInfo": "v0.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-webauthn:x:v0.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_webauthn:x:v0.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:x:v0.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-webauthn/x@v0.3.1"}]}, {"name": "github.com/golang-jwt/jwt/v5", "SPDXID": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-c0167b724e150176", "versionInfo": "v5.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang-jwt:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang_jwt:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/golang-jwt/jwt@v5.3.1#v5"}]}, {"name": "github.com/golang/protobuf", "SPDXID": "SPDXRef-Package-go-module-github.com-golang-protobuf-68b02c3cd344d0bd", "versionInfo": "v1.5.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:protobuf:v1.5.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/golang/protobuf@v1.5.4"}]}, {"name": "github.com/google/go-cmp", "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-cmp-ed72f71279c01785", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go-cmp:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go_cmp:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/go-cmp@v0.7.0"}]}, {"name": "github.com/google/go-tpm", "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-tpm-518c9c88753c028f", "versionInfo": "v0.9.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go-tpm:v0.9.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go_tpm:v0.9.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/go-tpm@v0.9.8"}]}, {"name": "github.com/google/s2a-go", "SPDXID": "SPDXRef-Package-go-module-github.com-google-s2a-go-93e2e60c860c4810", "versionInfo": "v0.1.10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:s2a-go:v0.1.10:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:s2a_go:v0.1.10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/s2a-go@v0.1.10"}]}, {"name": "github.com/google/uuid", "SPDXID": "SPDXRef-Package-go-module-github.com-google-uuid-51f849ef3d2ee82f", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/uuid@v1.6.0"}]}, {"name": "github.com/googleapis/enterprise-certificate-proxy", "SPDXID": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-a5aaae7cecf61cc4", "versionInfo": "v0.3.22", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:enterprise-certificate-proxy:v0.3.22:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:enterprise_certificate_proxy:v0.3.22:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.22"}]}, {"name": "github.com/googleapis/gax-go/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-efea43c1c672f847", "versionInfo": "v2.26.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:gax-go\\/v2:v2.26.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:gax_go\\/v2:v2.26.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/googleapis/gax-go@v2.26.2#v2"}]}, {"name": "github.com/gorilla/handlers", "SPDXID": "SPDXRef-Package-go-module-github.com-gorilla-handlers-5b67d560ae3c02bd", "versionInfo": "v1.5.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gorilla:handlers:v1.5.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gorilla/handlers@v1.5.2"}]}, {"name": "github.com/gorilla/mux", "SPDXID": "SPDXRef-Package-go-module-github.com-gorilla-mux-a1ffe1740a6d70a8", "versionInfo": "v1.8.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gorilla:mux:v1.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gorilla/mux@v1.8.1"}]}, {"name": "github.com/grpc-ecosystem/go-grpc-prometheus", "SPDXID": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-go-grpc-prometheus-b4bd70f05ff75f03", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc-ecosystem:go-grpc-prometheus:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc-ecosystem:go_grpc_prometheus:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc_ecosystem:go-grpc-prometheus:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc_ecosystem:go_grpc_prometheus:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc:go-grpc-prometheus:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc:go_grpc_prometheus:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/grpc-ecosystem/go-grpc-prometheus@v1.2.0"}]}, {"name": "github.com/grpc-ecosystem/grpc-gateway/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-grpc-gateway-v2-bd5e4b2ac7568892", "versionInfo": "v2.29.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc-ecosystem:grpc-gateway\\/v2:v2.29.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc-ecosystem:grpc_gateway\\/v2:v2.29.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc_ecosystem:grpc-gateway\\/v2:v2.29.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc_ecosystem:grpc_gateway\\/v2:v2.29.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc:grpc-gateway\\/v2:v2.29.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grpc:grpc_gateway\\/v2:v2.29.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway@v2.29.0#v2"}]}, {"name": "github.com/hashicorp/errwrap", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-0446c7d253f4528d", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:errwrap:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0"}]}, {"name": "github.com/hashicorp/go-cleanhttp", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-49a19d7fe2e8d442", "versionInfo": "v0.5.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-cleanhttp:v0.5.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_cleanhttp:v0.5.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2"}]}, {"name": "github.com/hashicorp/go-multierror", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-fc43110d9ba69185", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-multierror:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_multierror:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1"}]}, {"name": "github.com/hashicorp/go-retryablehttp", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-retryablehttp-6733d6bb212fa914", "versionInfo": "v0.7.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:retryablehttp:v0.7.8:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8"}]}, {"name": "github.com/hashicorp/go-secure-stdlib/parseutil", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-secure-stdlib-parseutil-232e9db339c38dcd", "versionInfo": "v0.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-secure-stdlib\\/parseutil:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_secure_stdlib\\/parseutil:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-secure-stdlib@v0.2.0#parseutil"}]}, {"name": "github.com/hashicorp/go-secure-stdlib/strutil", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-secure-stdlib-strutil-f85cba3c191cd67f", "versionInfo": "v0.1.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-secure-stdlib\\/strutil:v0.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_secure_stdlib\\/strutil:v0.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-secure-stdlib@v0.1.2#strutil"}]}, {"name": "github.com/hashicorp/go-sockaddr", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-sockaddr-8436b87dccc39730", "versionInfo": "v1.0.7", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-sockaddr:v1.0.7:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_sockaddr:v1.0.7:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-sockaddr@v1.0.7"}]}, {"name": "github.com/hashicorp/go-uuid", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-uuid-cd9249e1429ad66f", "versionInfo": "v1.0.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-uuid:v1.0.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_uuid:v1.0.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-uuid@v1.0.3"}]}, {"name": "github.com/hashicorp/hcl", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-3e2b42ab0c5256ba", "versionInfo": "v1.0.1-vault-7", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:hcl:v1.0.1-vault-7:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/hcl@v1.0.1-vault-7"}]}, {"name": "github.com/hashicorp/hcl/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-5a80ab4ff0eb9077", "versionInfo": "v2.18.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:hcl\\/v2:v2.18.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/hcl@v2.18.1#v2"}]}, {"name": "github.com/huandu/xstrings", "SPDXID": "SPDXRef-Package-go-module-github.com-huandu-xstrings-7b211603fa66dada", "versionInfo": "v1.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:huandu:xstrings:v1.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/huandu/xstrings@v1.5.0"}]}, {"name": "github.com/jcmturner/aescts/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-jcmturner-aescts-v2-96b1e072d2efc12c", "versionInfo": "v2.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jcmturner:aescts\\/v2:v2.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jcmturner/aescts@v2.0.0#v2"}]}, {"name": "github.com/jcmturner/dnsutils/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-jcmturner-dnsutils-v2-6eba998bb0b7a052", "versionInfo": "v2.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jcmturner:dnsutils\\/v2:v2.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jcmturner/dnsutils@v2.0.0#v2"}]}, {"name": "github.com/jcmturner/gofork", "SPDXID": "SPDXRef-Package-go-module-github.com-jcmturner-gofork-73af6a2f564c4b2d", "versionInfo": "v1.7.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jcmturner:gofork:v1.7.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jcmturner/gofork@v1.7.6"}]}, {"name": "github.com/jcmturner/goidentity/v6", "SPDXID": "SPDXRef-Package-go-module-github.com-jcmturner-goidentity-v6-115252bdee054cad", "versionInfo": "v6.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jcmturner:goidentity\\/v6:v6.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jcmturner/goidentity@v6.0.1#v6"}]}, {"name": "github.com/jcmturner/gokrb5/v8", "SPDXID": "SPDXRef-Package-go-module-github.com-jcmturner-gokrb5-v8-93ec61d53f843763", "versionInfo": "v8.4.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jcmturner:gokrb5\\/v8:v8.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jcmturner/gokrb5@v8.4.4#v8"}]}, {"name": "github.com/jcmturner/rpc/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-jcmturner-rpc-v2-cc5190389d530471", "versionInfo": "v2.0.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jcmturner:rpc\\/v2:v2.0.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jcmturner/rpc@v2.0.3#v2"}]}, {"name": "github.com/jonboulle/clockwork", "SPDXID": "SPDXRef-Package-go-module-github.com-jonboulle-clockwork-3928e2db080f96f8", "versionInfo": "v0.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jonboulle:clockwork:v0.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jonboulle/clockwork@v0.5.0"}]}, {"name": "github.com/lib/pq", "SPDXID": "SPDXRef-Package-go-module-github.com-lib-pq-cefab2817e76bea0", "versionInfo": "v1.12.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lib:pq:v1.12.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/lib/pq@v1.12.3"}]}, {"name": "github.com/mattermost/xml-roundtrip-validator", "SPDXID": "SPDXRef-Package-go-module-github.com-mattermost-xml-roundtrip-validator-ee2e4577afefa673", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattermost:xml-roundtrip-validator:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattermost:xml_roundtrip_validator:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattermost/xml-roundtrip-validator@v0.1.0"}]}, {"name": "github.com/mattn/go-sqlite3", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-sqlite3-6b39a753e9d4bf23", "versionInfo": "v1.14.52", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-sqlite3:v1.14.52:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_sqlite3:v1.14.52:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-sqlite3@v1.14.52"}]}, {"name": "github.com/mitchellh/copystructure", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-7b25fd45f474b596", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:copystructure:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/copystructure@v1.2.0"}]}, {"name": "github.com/mitchellh/go-wordwrap", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-f6c3ec7b74433e20", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:go-wordwrap:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:go_wordwrap:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1"}]}, {"name": "github.com/mitchellh/mapstructure", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-mapstructure-a06ee83b8beb9da8", "versionInfo": "v1.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:mapstructure:v1.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/mapstructure@v1.5.0"}]}, {"name": "github.com/mitchellh/reflectwalk", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-8f460e686283cd4a", "versionInfo": "v1.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:reflectwalk:v1.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/reflectwalk@v1.0.2"}]}, {"name": "github.com/munnerz/goautoneg", "SPDXID": "SPDXRef-Package-go-module-github.com-munnerz-goautoneg-8332c30025d7181c", "versionInfo": "v0.0.0-20191010083416-a7dc8b61c822", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:munnerz:goautoneg:v0.0.0-20191010083416-a7dc8b61c822:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822"}]}, {"name": "github.com/oklog/run", "SPDXID": "SPDXRef-Package-go-module-github.com-oklog-run-e6dfbd22a244b9e7", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oklog:run:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/oklog/run@v1.2.0"}]}, {"name": "github.com/openbao/openbao/api/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-openbao-openbao-api-v2-11a3e698551910da", "versionInfo": "v2.7.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:openbao:openbao\\/api\\/v2:v2.7.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/openbao/openbao@v2.7.1#api/v2"}]}, {"name": "github.com/philhofer/fwd", "SPDXID": "SPDXRef-Package-go-module-github.com-philhofer-fwd-0f9373c02bb4cebe", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:philhofer:fwd:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/philhofer/fwd@v1.2.0"}]}, {"name": "github.com/pkg/errors", "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-errors-881322be62b7bbd4", "versionInfo": "v0.9.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pkg/errors@v0.9.1"}]}, {"name": "github.com/pquerna/otp", "SPDXID": "SPDXRef-Package-go-module-github.com-pquerna-otp-ee669b96f0cdf90a", "versionInfo": "v1.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pquerna:otp:v1.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pquerna/otp@v1.5.0"}]}, {"name": "github.com/prometheus/client_golang", "SPDXID": "SPDXRef-Package-go-module-github.com-prometheus-client-golang-5222f7aa5bae7d73", "versionInfo": "v1.24.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:client-golang:v1.24.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:client_golang:v1.24.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/prometheus/client_golang@v1.24.1"}]}, {"name": "github.com/prometheus/client_model", "SPDXID": "SPDXRef-Package-go-module-github.com-prometheus-client-model-66d3cecf26aeef60", "versionInfo": "v0.6.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:client-model:v0.6.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:client_model:v0.6.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/prometheus/client_model@v0.6.2"}]}, {"name": "github.com/prometheus/common", "SPDXID": "SPDXRef-Package-go-module-github.com-prometheus-common-4b31fe07434677b9", "versionInfo": "v0.70.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:common:v0.70.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/prometheus/common@v0.70.1"}]}, {"name": "github.com/prometheus/procfs", "SPDXID": "SPDXRef-Package-go-module-github.com-prometheus-procfs-382857ff98eb0a48", "versionInfo": "v0.21.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:procfs:v0.21.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/prometheus/procfs@v0.21.1"}]}, {"name": "github.com/russellhaering/goxmldsig", "SPDXID": "SPDXRef-Package-go-module-github.com-russellhaering-goxmldsig-1c6eaa8d6ea9c53c", "versionInfo": "v1.6.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:russellhaering:goxmldsig:v1.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/russellhaering/goxmldsig@v1.6.1"}]}, {"name": "github.com/ryanuber/go-glob", "SPDXID": "SPDXRef-Package-go-module-github.com-ryanuber-go-glob-f7c10ccc394b3298", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ryanuber:go-glob:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ryanuber:go_glob:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/ryanuber/go-glob@v1.0.0"}]}, {"name": "github.com/shopspring/decimal", "SPDXID": "SPDXRef-Package-go-module-github.com-shopspring-decimal-0835b07a031b9ddf", "versionInfo": "v1.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:shopspring:decimal:v1.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/shopspring/decimal@v1.4.0"}]}, {"name": "github.com/spf13/cast", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-cast-69189b6d27a1c2a3", "versionInfo": "v1.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:cast:v1.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/cast@v1.7.0"}]}, {"name": "github.com/spf13/cobra", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-cobra-831a722382d4fc44", "versionInfo": "v1.10.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:cobra:v1.10.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/cobra@v1.10.2"}]}, {"name": "github.com/spf13/pflag", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-pflag-77a3d7374b1cea3c", "versionInfo": "v1.0.9", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:pflag:v1.0.9:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/pflag@v1.0.9"}]}, {"name": "github.com/tinylib/msgp", "SPDXID": "SPDXRef-Package-go-module-github.com-tinylib-msgp-d2588377aac99593", "versionInfo": "v1.6.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tinylib:msgp:v1.6.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/tinylib/msgp@v1.6.4"}]}, {"name": "github.com/x448/float16", "SPDXID": "SPDXRef-Package-go-module-github.com-x448-float16-19b431edf9f015b0", "versionInfo": "v0.8.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:x448:float16:v0.8.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/x448/float16@v0.8.4"}]}, {"name": "github.com/zclconf/go-cty", "SPDXID": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-abec65de8982176f", "versionInfo": "v1.14.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zclconf:go-cty:v1.14.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zclconf:go_cty:v1.14.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/zclconf/go-cty@v1.14.4"}]}, {"name": "github.com/zclconf/go-cty-yaml", "SPDXID": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-yaml-de934ca1dbcb06d5", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zclconf:go-cty-yaml:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zclconf:go_cty_yaml:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/zclconf/go-cty-yaml@v1.1.0"}]}, {"name": "go.etcd.io/etcd/api/v3", "SPDXID": "SPDXRef-Package-go-module-go.etcd.io-etcd-api-v3-74d5ac5747854d43", "versionInfo": "v3.7.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:etcd:api\\/v3:v3.7.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.etcd.io/etcd/api@v3.7.2#v3"}]}, {"name": "go.etcd.io/etcd/client/pkg/v3", "SPDXID": "SPDXRef-Package-go-module-go.etcd.io-etcd-client-pkg-v3-b8fe7810ffe2eff8", "versionInfo": "v3.7.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:etcd:client\\/pkg\\/v3:v3.7.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.etcd.io/etcd/client@v3.7.2#pkg/v3"}]}, {"name": "go.etcd.io/etcd/client/v3", "SPDXID": "SPDXRef-Package-go-module-go.etcd.io-etcd-client-v3-95b7bad531b4850c", "versionInfo": "v3.7.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:etcd:client\\/v3:v3.7.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.etcd.io/etcd/client@v3.7.2#v3"}]}, {"name": "go.opentelemetry.io/auto/sdk", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-b6d3a9884952cb38", "versionInfo": "v1.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:auto:sdk:v1.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1"}]}, {"name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-406b47b92fc57614", "versionInfo": "v0.69.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/otelhttp:v0.69.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation@v0.69.0#net/http/otelhttp"}]}, {"name": "go.opentelemetry.io/otel", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-ce4d18b9bce61578", "versionInfo": "v1.45.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel@v1.45.0"}]}, {"name": "go.opentelemetry.io/otel/metric", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-676a8a4f1304862f", "versionInfo": "v1.45.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:metric:v1.45.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/metric@v1.45.0"}]}, {"name": "go.opentelemetry.io/otel/trace", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-1e5ff660de9aa7e5", "versionInfo": "v1.45.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:trace:v1.45.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/trace@v1.45.0"}]}, {"name": "go.uber.org/multierr", "SPDXID": "SPDXRef-Package-go-module-go.uber.org-multierr-fa52f4dd2701d406", "versionInfo": "v1.11.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.uber.org/multierr@v1.11.0"}]}, {"name": "go.uber.org/zap", "SPDXID": "SPDXRef-Package-go-module-go.uber.org-zap-a0d4d4f1f62d36bb", "versionInfo": "v1.27.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.uber.org/zap@v1.27.1"}]}, {"name": "golang.org/x/crypto", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-crypto-6112c38a94cd0ace", "versionInfo": "v0.57.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:ssh:v0.57.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/crypto@v0.57.0"}]}, {"name": "golang.org/x/exp", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-exp-3d8b5d853a935abc", "versionInfo": "v0.0.0-20240823005443-9b4947da3948", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/exp:v0.0.0-20240823005443-9b4947da3948:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/exp@v0.0.0-20240823005443-9b4947da3948"}]}, {"name": "golang.org/x/mod", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-mod-9dc2c09fbe0a9575", "versionInfo": "v0.41.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/mod:v0.41.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/mod@v0.41.0"}]}, {"name": "golang.org/x/net", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-net-2872019f62dcca1d", "versionInfo": "v0.59.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:networking:v0.59.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/net@v0.59.0"}]}, {"name": "golang.org/x/oauth2", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-oauth2-82bd599ae8656496", "versionInfo": "v0.37.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/oauth2:v0.37.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/oauth2@v0.37.0"}]}, {"name": "golang.org/x/sys", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sys-3e5e2f480b5b9255", "versionInfo": "v0.48.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sys:v0.48.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sys@v0.48.0"}]}, {"name": "golang.org/x/text", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-text-e53ce01add95a36c", "versionInfo": "v0.42.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:text:v0.42.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/text@v0.42.0"}]}, {"name": "golang.org/x/time", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-time-e971e780b602f23a", "versionInfo": "v0.16.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/time:v0.16.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/time@v0.16.0"}]}, {"name": "google.golang.org/api", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-api-c3cf2612761e5f5b", "versionInfo": "v0.300.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:api:v0.300.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/api@v0.300.0"}]}, {"name": "google.golang.org/genproto/googleapis/api", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-814a7ca2649a01c2", "versionInfo": "v0.0.0-20260715232425-e75dac1f907d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260715232425-e75dac1f907d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260715232425-e75dac1f907d#api"}]}, {"name": "google.golang.org/genproto/googleapis/rpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-b69e6ed57879b4ae", "versionInfo": "v0.0.0-20260921155816-b14227669459", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260921155816-b14227669459:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260921155816-b14227669459#rpc"}]}, {"name": "google.golang.org/grpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-grpc-b65b5e6a03578367", "versionInfo": "v1.84.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:grpc:v1.84.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/grpc@v1.84.0"}]}, {"name": "google.golang.org/protobuf", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-protobuf-7e18795acc87c004", "versionInfo": "v1.36.12", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:protobuf:v1.36.12:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/protobuf@v1.36.12"}]}, {"name": "gopkg.in/yaml.v2", "SPDXID": "SPDXRef-Package-go-module-gopkg.in-yaml.v2-791db659b62a25a4", "versionInfo": "v2.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/gopkg.in/yaml.v2@v2.4.0"}]}, {"name": "gopkg.in/yaml.v3", "SPDXID": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-8e7b2e4116ccad3c", "versionInfo": "v3.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml_project:yaml:v3.0.1:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/gopkg.in/yaml.v3@v3.0.1"}]}, {"name": "stdlib", "SPDXID": "SPDXRef-Package-go-module-stdlib-f082e63930a8c824", "versionInfo": "go1.27.1-X:nodwarf5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/dex", "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:go:1.27.1:-:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/stdlib@1.27.1-X%3Anodwarf5"}]}, {"name": "rpm-extracted/dex-2.46.0-0.1.hum1.x86_64", "SPDXID": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "dex", "SPDXID": "SPDXRef-Package-rpm-dex-a7ecc7224de4c251", "versionInfo": "2.46.0-0.1.hum1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from RPM DB: /usr/lib/debug/usr/bin/dex-2.46.0-0.1.hum1.x86_64.debug", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dex:dex:2.46.0-0.1.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/hummingbird/dex@2.46.0-0.1.hum1?distro=hummingbird-1"}]}, {"name": "rpm-extracted/dex-debuginfo-2.46.0-0.1.hum1.x86_64", "SPDXID": "SPDXRef-Directory-Root-dex-debuginfo-2.46.0-0.1.hum1.x86-64", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "rpm-extracted/dex-debugsource-2.46.0-0.1.hum1.x86_64", "SPDXID": "SPDXRef-Directory-Root-dex-debugsource-2.46.0-0.1.hum1.x86-64", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}], "files": [{"fileName": "usr/bin/dex", "SPDXID": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "fileTypes": ["APPLICATION", "BINARY"], "checksums": [{"algorithm": "SHA1", "checksumValue": "cb68355589f32bad3c5282ae245d58d7242a5908"}, {"algorithm": "SHA256", "checksumValue": "fcf66c83f8cfce42dde1cab1b50e5f83c3f90c08e09916ff767cdaf20b8338ff"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "dex-2.46.0/.github/workflows/analysis-scorecard.yaml", "SPDXID": "SPDXRef-File-...workflows-analysis-scorecard.yaml-159c69e81070772d", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "7360605fafd38e957acf4117a5436de26a241049"}, {"algorithm": "SHA256", "checksumValue": "9ce0de1e69aa290365aed7097f91f1c0a5b8dee2bacba8a633a36f078d792d35"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "dex-2.46.0/.github/workflows/artifacts.yaml", "SPDXID": "SPDXRef-File-....github-workflows-artifacts.yaml-8427f57ab80d38fb", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "09b931ec3dbfa26a43977da1daec81619e2a9fe0"}, {"algorithm": "SHA256", "checksumValue": "95cc4fcf29b984b983b8f12a035b6983b4136bb4eac516029911a59195c6b482"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "dex-2.46.0/.github/workflows/checks.yaml", "SPDXID": "SPDXRef-File-....github-workflows-checks.yaml-ead1312ab2fab5dd", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "db22ac51ad9f26beec5f06a93800206eeec3f99b"}, {"algorithm": "SHA256", "checksumValue": "ab5ab53e12490156308f1f1ca887cd0f10885898cf06e405934396f1626adb1d"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "dex-2.46.0/.github/workflows/ci.yaml", "SPDXID": "SPDXRef-File-dex-2.46.0-.github-workflows-ci.yaml-7b9f797dfb3d8f18", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "f7456719c6e4f93e657586d9a0c9337069ce02fc"}, {"algorithm": "SHA256", "checksumValue": "d84bbc10f8b312ea76e28d4f2357905a73fd74ba4ba3f594cdb27fb878e414eb"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "dex-2.46.0/.github/workflows/release.yaml", "SPDXID": "SPDXRef-File-....github-workflows-release.yaml-ef570a04b59582ed", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "ef77c2c953b0b95bb1c2528d8bf50a79896cf4b3"}, {"algorithm": "SHA256", "checksumValue": "b39797ac3a9d811a845cc70cfc9d1d7f406c8d068e1e2ad379d61d44d880e53d"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "dex-2.46.0/.github/workflows/trivydb-cache.yaml", "SPDXID": "SPDXRef-File-....github-workflows-trivydb-cache.yaml-e624209b5accdadd", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "63b00afa29384aab2b24bf7ae6aea69f127bcd11"}, {"algorithm": "SHA256", "checksumValue": "6532816acb08fc84de684c4d564fcd92f20e9df78b57484e5eae5d4bea33188c"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "dex-2.46.0/api/v2/go.mod", "SPDXID": "SPDXRef-File-dex-2.46.0-api-v2-go.mod-9d6043f497642d4c", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "7230d6ce630f6cc8a0d12ab5d0940b2d8e167df1"}, {"algorithm": "SHA256", "checksumValue": "30ae11800bdca2bdbf0e0e116206150fae46a0c2c132deacf146bae241a73280"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "dex-2.46.0/examples/go.mod", "SPDXID": "SPDXRef-File-dex-2.46.0-examples-go.mod-2792f6f74908cdb9", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "c0d7a70f3ce07c44a778b20533c2a193eac89533"}, {"algorithm": "SHA256", "checksumValue": "4a7dc4fc7e2565726bf7688e0b4155168b4dfe6e94d28abff438a31d3acd1451"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "dex-2.46.0/go.mod", "SPDXID": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "49686f63bea5e069e829c1e27ce38a7c7689d457"}, {"algorithm": "SHA256", "checksumValue": "578dac56cf9639e1ed8247d7255470c4b3e7d8586a1d9fa3cf5dc7f046211f1f"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "go.mod", "SPDXID": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "49686f63bea5e069e829c1e27ce38a7c7689d457"}, {"algorithm": "SHA256", "checksumValue": "578dac56cf9639e1ed8247d7255470c4b3e7d8586a1d9fa3cf5dc7f046211f1f"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "vendor/go.opentelemetry.io/otel/requirements.txt", "SPDXID": "SPDXRef-File-...otel-requirements.txt-b69fd806af1e91ad", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "a8103c62e89df627de9391e00afc983d8dcc59a5"}, {"algorithm": "SHA256", "checksumValue": "58b5554458d50b191e6db6e5c63365741adb4dccab5b57fb295196b871abcda6"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/lib/debug/usr/bin/dex-2.46.0-0.1.hum1.aarch64.debug", "SPDXID": "SPDXRef-File-...bin-dex-2.46.0-0.1.hum1.aarch64.debug-8a8e6212c419f48d", "fileTypes": ["APPLICATION", "BINARY"], "checksums": [{"algorithm": "SHA1", "checksumValue": "d0f0343f83e6c93ab95854ba5f2511429f6f2776"}, {"algorithm": "SHA256", "checksumValue": "d48303346d173acb73c82e5a23bcc96527e89fdfc311488259de0fcbe4ea1ed8"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/bin/dex", "SPDXID": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "fileTypes": ["APPLICATION", "BINARY"], "checksums": [{"algorithm": "SHA1", "checksumValue": "b7fbfcff6c6725d605a0e24b4f157f03127b7e76"}, {"algorithm": "SHA256", "checksumValue": "1b1daf641697dd5619554aff692efe7d0329c972c818cbc4c352f131579130f5"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/lib/debug/usr/bin/dex-2.46.0-0.1.hum1.x86_64.debug", "SPDXID": "SPDXRef-File-...bin-dex-2.46.0-0.1.hum1.x86-64.debug-1400fbbc700a5840", "fileTypes": ["APPLICATION", "BINARY"], "checksums": [{"algorithm": "SHA1", "checksumValue": "443bea221559b8966e55a959530c67f95dedd2fe"}, {"algorithm": "SHA256", "checksumValue": "5fea4570e7c8d2f976d96e65ec74288dfff8703d73e2995da5306420e0d26544"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}], "relationships": [{"spdxElementId": "SPDXRef-DOCUMENT", "relationshipType": "DESCRIBES", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-aarch64-dex", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-x86-64-dex", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-aarch64-dex-debuginfo", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-x86-64-dex-debuginfo", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-aarch64-dex-debugsource", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-x86-64-dex-debugsource", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source0"}, {"spdxElementId": "SPDXRef-Source0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Source0-origin"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source1"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source2"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-R-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-add-determinism-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-alternatives-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-annobin-docs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-annobin-plugin-gcc-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ansible-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-askalono-cli-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-audit-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bash-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-binutils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-build-reproducibility-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bzip2-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bzip2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ca-certificates-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cmake-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-coreutils-common-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-coreutils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cpio-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cpp-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-crypto-policies-config-default-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-crypto-policies-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-curl-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cyrus-sasl-lib-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-debugedit-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-diffutils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-dwz-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ed-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-efi-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-debuginfod-client-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-libelf-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-erlang-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-expat-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-file-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-filesystem-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-filesystem-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-file-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-findutils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-fonts-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-forge-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-fpc-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gap-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gawk-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gcc-plugin-annobin-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gcc-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gdb-minimal-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gdbm-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ghc-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-common-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-gconv-extra-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-minimal-langpack-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gmp-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnat-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnome-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnulib-l10n-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-dirmngr-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-gpg-agent-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-gpgconf-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-keyboxd-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-verify-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnutls-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-filesystem-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-rpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-vendor-tools-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-bin-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-src-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golist-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gpgverify-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-grep-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gzip-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-gpg-keys-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-release-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-repos-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ima-evm-utils-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-info-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-jansson-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-java-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-json-c-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-kernel-headers-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-kernel-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-keyutils-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-krb5-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libacl-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libarchive-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libasan-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libassuan-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libatomic-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libattr-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libblkid-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libbrotli-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcap-ng-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcap-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcbor-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcom-err-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcurl-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libeconf-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libevent-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfdisk-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libffi-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfido2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfsverity-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgcc-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgcrypt-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgomp-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgpg-error-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libidn2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libksba-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-liblastlog2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libmount-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libmpc-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnghttp2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnghttp3-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpfm-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpkgconf-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpsl-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libselinux-utils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libselinux-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsemanage-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsepol-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsmartcols-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libssh-config-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libssh-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libstdc++-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtasn1-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtool-ltdl-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libubsan-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libunistring-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libusb1-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libuuid-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libverto-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxcrypt-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxcrypt-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxml2-16-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libzstd-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-linkdupes-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lua-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lua-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lz4-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-make-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-meson-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-mpdecimal-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-mpfr-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ncurses-base-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ncurses-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-nettle-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ngtcp2-crypto-ossl-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ngtcp2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-npth-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ocaml-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openblas-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openldap-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssl-fips-provider-upstream-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssl-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-p11-kit-trust-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-p11-kit-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-package-notes-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pam-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-patch-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-syntax-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-perl-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-m4-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-pkg-config-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-policycoreutils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-popt-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-publicsuffix-list-dafsa-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pyproject-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python-pip-wheel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-boolean.py-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-license-expression-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-qt5-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-qt6-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-readline-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-redhat-rpm-config-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-build-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-build-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-plugin-selinux-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-sequoia-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-sign-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rust-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sed-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-selinux-policy-targeted-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-selinux-policy-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-setup-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-shadow-utils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sqlite-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-standalone-sysusers-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tar-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tpm2-tss-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tree-sitter-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tzdata-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-unzip-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-util-linux-core-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-util-linux-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-which-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xxhash-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xz-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xz-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zig-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zip-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zlib-ng-compat-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zstd-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-aarch64-dex"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-aarch64-dex-debuginfo"}, {"spdxElementId": "SPDXRef-Buildroot-dex-aarch64", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-aarch64-dex-debugsource"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-R-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-add-determinism-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-alternatives-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-annobin-docs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-annobin-plugin-gcc-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ansible-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-askalono-cli-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-audit-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bash-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-binutils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-build-reproducibility-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bzip2-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bzip2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ca-certificates-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cmake-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-coreutils-common-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-coreutils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cpio-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cpp-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-crypto-policies-config-default-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-crypto-policies-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-curl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cyrus-sasl-lib-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-debugedit-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-diffutils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-dwz-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ed-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-efi-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-debuginfod-client-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-libelf-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-erlang-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-expat-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-file-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-filesystem-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-filesystem-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-file-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-findutils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-fonts-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-forge-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-fpc-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gap-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gawk-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gcc-plugin-annobin-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gcc-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gdb-minimal-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gdbm-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ghc-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-common-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-gconv-extra-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-minimal-langpack-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gmp-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnat-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnome-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnulib-l10n-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-dirmngr-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-gpg-agent-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-gpgconf-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-keyboxd-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-verify-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnutls-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-filesystem-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-rpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-vendor-tools-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-bin-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-src-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golist-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gpgverify-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-grep-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gzip-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-gpg-keys-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-release-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-repos-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ima-evm-utils-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-info-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-jansson-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-java-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-json-c-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-kernel-headers-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-kernel-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-keyutils-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-krb5-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libacl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libarchive-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libassuan-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libatomic-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libattr-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libblkid-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libbrotli-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcap-ng-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcap-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcbor-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcom-err-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcurl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libeconf-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libevent-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfdisk-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libffi-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfido2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfsverity-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgcc-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgcrypt-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgomp-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgpg-error-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libidn2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libksba-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-liblastlog2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libmount-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libmpc-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnghttp2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnghttp3-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpfm-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpkgconf-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpsl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libselinux-utils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libselinux-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsemanage-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsepol-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsmartcols-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libssh-config-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libssh-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libstdc++-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtasn1-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtool-ltdl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libunistring-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libusb1-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libuuid-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libverto-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxcrypt-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxcrypt-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxml2-16-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libzstd-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-linkdupes-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lua-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lua-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lz4-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-make-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-meson-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-mpdecimal-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-mpfr-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ncurses-base-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ncurses-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-nettle-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ngtcp2-crypto-ossl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ngtcp2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-npth-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ocaml-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openblas-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openldap-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssl-fips-provider-upstream-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssl-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-p11-kit-trust-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-p11-kit-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-package-notes-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pam-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-patch-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-syntax-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-perl-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-m4-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-pkg-config-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-policycoreutils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-popt-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-publicsuffix-list-dafsa-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pyproject-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python-pip-wheel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-boolean.py-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-license-expression-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-qt5-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-qt6-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-readline-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-redhat-rpm-config-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-build-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-build-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-plugin-selinux-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-sequoia-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-sign-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rust-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sed-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-selinux-policy-targeted-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-selinux-policy-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-setup-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-shadow-utils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sqlite-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-standalone-sysusers-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tar-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tpm2-tss-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tree-sitter-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tzdata-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-unzip-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-util-linux-core-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-util-linux-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-which-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xxhash-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xz-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xz-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zig-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zip-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zlib-ng-compat-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zstd-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-x86-64-dex"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-x86-64-dex-debuginfo"}, {"spdxElementId": "SPDXRef-Buildroot-dex-x86-64", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-x86-64-dex-debugsource"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-client-model-00a4cb062feee677", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-0521c5f844ce36ef", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-0a6756cb9ec2e2b3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-x448-float16-0b2204cb9796a42b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-mapstructure-0be713daa1161c9b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-russellhaering-goxmldsig-0f47bc5e79a32e3b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-10a4bb7de3ed016e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fxamacker-cbor-v2-112c8dcc5aa1df98", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-tpm-11f4b9e4b65ab49c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-121fef0ed48d27a7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-yaml-1457c2798420112e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-1e0a629c2e187090", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-semver-20bd4e9009b9ea17", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gorilla-mux-220ad65fb54d0957", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-sql-driver-mysql-2468534af4b0dba8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-.-api-v2-2c1dcafbb37712cd", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cenkalti-backoff-v5-2d2cb27716ec71ee", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-2d5184aa4d6a34af", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-2efdf6dc19233759", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-2f1b7f9f6dd72e1f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.uber.org-zap-329815d4cf6e300c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-yaml.v2-334ef4a5772a819f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-373cd3bb2b5cb4ef", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-384727c18a3a1324", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-3bc14171d483b119", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-common-3be4a4f5ed39e59a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-41e9fbfc57119363", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-v22-45345e6247818704", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.etcd.io-etcd-client-v3-46a8d5678cff569b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-48d9afc9e41e1807", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-s2a-go-4957470f72468e63", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jcmturner-gokrb5-v8-4d48e17db2d8bdc8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-dario.cat-mergo-4fc9b3d9d87a12b3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-boombuler-barcode-564fe46d1b2d91ae", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-AppsFlyer-go-sundheit-582521e74166ccdb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-cmp-5a77a7e983801456", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-5a7d7da6426999fe", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-beevik-etree-5acbcf0c9285f7da", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-ldap-ldap-v3-5bdbdb2758926af3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-webauthn-webauthn-5bf7840165409607", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.etcd.io-etcd-api-v3-5e637c17362041f0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-go-grpc-prometheus-5fa751c7ebab9fc8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-mod-60ee454464914a0a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-uuid-6643792428ebab68", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-agext-levenshtein-696e34726728f3e4", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-api-6b2c44e2f6a00a90", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-6c873849a754be86", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-6caa7cb1ffac1c68", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-6d52ba4da158e755", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gorilla-handlers-6faecad3a871d25e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jcmturner-rpc-v2-72abd17a9bd23aea", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ghodss-yaml-734e5f4c0b7b7bac", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jcmturner-goidentity-v6-737cecefa7f55c16", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-7459d807006035e0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-772707d6a1821117", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jonboulle-clockwork-79673d7d6f31a233", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-7aaa33dc851fb3c3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-errors-805deee25838bc13", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-oklog-run-80a9a9bd310f4dbc", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-82e952ebc66b98c5", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-8418983d4499589d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattermost-xml-roundtrip-validator-86611180d3097734", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-openapi-inflect-89172f7047a3d50e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Azure-go-ntlmssp-8d0c748a5b0c774a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-8da489be570b1e2c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pquerna-otp-913be8f85e94beb1", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-943019e47c575fba", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-secure-stdlib-strutil-95341417fe70325c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-959368c1fb7bf140", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-99370ed076b9216e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cast-994ee05d78625e18", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-9b0c1e50b3e2c92c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-filippo.io-edwards25519-9c4679052caf00c9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-lib-pq-9efb87cc10b2719f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-time-9ff1cf69c3b74d01", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-procfs-a0c72f75b3121b33", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tinylib-msgp-a275e3d11a82359c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-a50acbe0ade5b4af", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-semver-a57a770d58f319b0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-a789d9bbbd682e1a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-philhofer-fwd-a7bb2a71a771ecd1", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-ariga.io-atlas-a98ee130f5c49356", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-secure-stdlib-parseutil-ad8456c4c3cf1a76", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-ad92008a67236aed", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-golang-protobuf-af26c8f7bebbfdae", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-grpc-gateway-v2-afe7ac103e8d4ecd", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-openbao-openbao-api-v2-b15fd85395c236fd", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.uber.org-multierr-b168f633cba7c795", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-huandu-xstrings-b2a5ddf0f545b7c1", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.etcd.io-etcd-client-pkg-v3-b61aeb81c7efd0eb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-beorn7-perks-b66b57fcca5680b7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-sockaddr-b90e7112cd4a5127", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-munnerz-goautoneg-b9dfa0adbcb09ff7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jcmturner-gofork-bc1fa81ee4f4d126", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-webauthn-x-beca76a3406a5caa", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-bf84e29308c71473", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-c0ddb1c757a015a9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-c26ed6ad3238064c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-shopspring-decimal-c66802a249115f78", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-asn1-ber-asn1-ber-ca507d9b14e012ac", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-cb7909a476018297", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-cfde819df4c6b939", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-d24f7d23a17992cf", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-d27253d4fd7719e4", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-da605449ea7588e1", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-exp-dfe7eba61631b803", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-e0e209125dcaeed2", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-retryablehttp-e0e623ea3aef7607", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-entgo.io-ent-e56fd5027c62dd5f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-client-golang-e6c6299adca4badc", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ryanuber-go-glob-e71d8196f17ee4a7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jcmturner-aescts-v2-e78bc2a9570d6f17", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-ed0de39ed4c5a960", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-edf2d0316bb517b3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-stdlib-f082e63930a8c824", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jcmturner-dnsutils-v2-f23df538048210fd", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-oauth2-f33316132920cd69", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-oidc-v3-f74fc19366074026", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-fa33b64249861aff", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-sqlite3-fb711fe054b828a8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-fd51fad5e0b090d6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-ff3f182fbd0cdb6c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-client-model-00a4cb062feee677", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-0521c5f844ce36ef", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-0a6756cb9ec2e2b3", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-x448-float16-0b2204cb9796a42b", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-mapstructure-0be713daa1161c9b", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-russellhaering-goxmldsig-0f47bc5e79a32e3b", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-10a4bb7de3ed016e", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fxamacker-cbor-v2-112c8dcc5aa1df98", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-tpm-11f4b9e4b65ab49c", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-121fef0ed48d27a7", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-yaml-1457c2798420112e", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-1e0a629c2e187090", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-semver-20bd4e9009b9ea17", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gorilla-mux-220ad65fb54d0957", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-sql-driver-mysql-2468534af4b0dba8", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-.-api-v2-2c1dcafbb37712cd", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cenkalti-backoff-v5-2d2cb27716ec71ee", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-2d5184aa4d6a34af", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-2efdf6dc19233759", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-2f1b7f9f6dd72e1f", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.uber.org-zap-329815d4cf6e300c", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-yaml.v2-334ef4a5772a819f", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-rpm-dex-3631dd46fe02fdaa", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-373cd3bb2b5cb4ef", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-384727c18a3a1324", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-3bc14171d483b119", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-common-3be4a4f5ed39e59a", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-41e9fbfc57119363", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-v22-45345e6247818704", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.etcd.io-etcd-client-v3-46a8d5678cff569b", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-48d9afc9e41e1807", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-s2a-go-4957470f72468e63", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jcmturner-gokrb5-v8-4d48e17db2d8bdc8", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-dario.cat-mergo-4fc9b3d9d87a12b3", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-boombuler-barcode-564fe46d1b2d91ae", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-AppsFlyer-go-sundheit-582521e74166ccdb", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-cmp-5a77a7e983801456", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-5a7d7da6426999fe", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-beevik-etree-5acbcf0c9285f7da", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-ldap-ldap-v3-5bdbdb2758926af3", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-webauthn-webauthn-5bf7840165409607", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.etcd.io-etcd-api-v3-5e637c17362041f0", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-go-grpc-prometheus-5fa751c7ebab9fc8", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-mod-60ee454464914a0a", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-uuid-6643792428ebab68", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-agext-levenshtein-696e34726728f3e4", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-api-6b2c44e2f6a00a90", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-6c873849a754be86", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-6caa7cb1ffac1c68", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-6d52ba4da158e755", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gorilla-handlers-6faecad3a871d25e", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jcmturner-rpc-v2-72abd17a9bd23aea", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ghodss-yaml-734e5f4c0b7b7bac", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jcmturner-goidentity-v6-737cecefa7f55c16", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-7459d807006035e0", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-772707d6a1821117", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jonboulle-clockwork-79673d7d6f31a233", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-7aaa33dc851fb3c3", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-errors-805deee25838bc13", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-oklog-run-80a9a9bd310f4dbc", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-82e952ebc66b98c5", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-8418983d4499589d", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattermost-xml-roundtrip-validator-86611180d3097734", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-openapi-inflect-89172f7047a3d50e", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Azure-go-ntlmssp-8d0c748a5b0c774a", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-8da489be570b1e2c", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pquerna-otp-913be8f85e94beb1", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-943019e47c575fba", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-secure-stdlib-strutil-95341417fe70325c", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-959368c1fb7bf140", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-99370ed076b9216e", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cast-994ee05d78625e18", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-9b0c1e50b3e2c92c", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-filippo.io-edwards25519-9c4679052caf00c9", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-lib-pq-9efb87cc10b2719f", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-time-9ff1cf69c3b74d01", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-procfs-a0c72f75b3121b33", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tinylib-msgp-a275e3d11a82359c", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-a50acbe0ade5b4af", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-semver-a57a770d58f319b0", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-a789d9bbbd682e1a", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-philhofer-fwd-a7bb2a71a771ecd1", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-ariga.io-atlas-a98ee130f5c49356", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-secure-stdlib-parseutil-ad8456c4c3cf1a76", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-ad92008a67236aed", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-golang-protobuf-af26c8f7bebbfdae", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-grpc-gateway-v2-afe7ac103e8d4ecd", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-openbao-openbao-api-v2-b15fd85395c236fd", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.uber.org-multierr-b168f633cba7c795", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-huandu-xstrings-b2a5ddf0f545b7c1", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.etcd.io-etcd-client-pkg-v3-b61aeb81c7efd0eb", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-beorn7-perks-b66b57fcca5680b7", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-sockaddr-b90e7112cd4a5127", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-munnerz-goautoneg-b9dfa0adbcb09ff7", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jcmturner-gofork-bc1fa81ee4f4d126", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-webauthn-x-beca76a3406a5caa", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-bf84e29308c71473", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-c0ddb1c757a015a9", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-c26ed6ad3238064c", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-shopspring-decimal-c66802a249115f78", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-asn1-ber-asn1-ber-ca507d9b14e012ac", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-cb7909a476018297", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-cfde819df4c6b939", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-d24f7d23a17992cf", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-d27253d4fd7719e4", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-da605449ea7588e1", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-exp-dfe7eba61631b803", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-e0e209125dcaeed2", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-retryablehttp-e0e623ea3aef7607", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-entgo.io-ent-e56fd5027c62dd5f", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-client-golang-e6c6299adca4badc", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ryanuber-go-glob-e71d8196f17ee4a7", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jcmturner-aescts-v2-e78bc2a9570d6f17", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-ed0de39ed4c5a960", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-edf2d0316bb517b3", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-stdlib-f082e63930a8c824", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jcmturner-dnsutils-v2-f23df538048210fd", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-oauth2-f33316132920cd69", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-oidc-v3-f74fc19366074026", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-fa33b64249861aff", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-sqlite3-fb711fe054b828a8", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-fd51fad5e0b090d6", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-ff3f182fbd0cdb6c", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-.-api-v2-2c1dcafbb37712cd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-ariga.io-atlas-a98ee130f5c49356", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-auth-2efdf6dc19233759", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-7459d807006035e0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-fa33b64249861aff", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-dario.cat-mergo-4fc9b3d9d87a12b3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-rpm-dex-3631dd46fe02fdaa", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-entgo.io-ent-e56fd5027c62dd5f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-filippo.io-edwards25519-9c4679052caf00c9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-AppsFlyer-go-sundheit-582521e74166ccdb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Azure-go-ntlmssp-8d0c748a5b0c774a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-a50acbe0ade5b4af", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Masterminds-semver-a57a770d58f319b0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-6caa7cb1ffac1c68", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-5a7d7da6426999fe", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-agext-levenshtein-696e34726728f3e4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-a789d9bbbd682e1a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-beevik-etree-5acbcf0c9285f7da", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-beorn7-perks-b66b57fcca5680b7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-48d9afc9e41e1807", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-boombuler-barcode-564fe46d1b2d91ae", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cenkalti-backoff-v5-2d2cb27716ec71ee", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-0a6756cb9ec2e2b3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-coreos-go-oidc-v3-f74fc19366074026", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-coreos-go-semver-20bd4e9009b9ea17", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-v22-45345e6247818704", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-d4882294578977a8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-d27253d4fd7719e4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-7aaa33dc851fb3c3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fxamacker-cbor-v2-112c8dcc5aa1df98", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-ghodss-yaml-734e5f4c0b7b7bac", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-asn1-ber-asn1-ber-ca507d9b14e012ac", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-943019e47c575fba", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-ldap-ldap-v3-5bdbdb2758926af3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-logr-9b0c1e50b3e2c92c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-stdr-edf2d0316bb517b3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-openapi-inflect-89172f7047a3d50e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-sql-driver-mysql-2468534af4b0dba8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-c26ed6ad3238064c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-webauthn-webauthn-5bf7840165409607", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-webauthn-x-beca76a3406a5caa", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-c0ddb1c757a015a9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-golang-protobuf-af26c8f7bebbfdae", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-cmp-5a77a7e983801456", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-tpm-11f4b9e4b65ab49c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-s2a-go-4957470f72468e63", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-uuid-384727c18a3a1324", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-121fef0ed48d27a7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-8da489be570b1e2c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gorilla-handlers-6faecad3a871d25e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gorilla-mux-220ad65fb54d0957", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-go-grpc-prometheus-5fa751c7ebab9fc8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-grpc-gateway-v2-afe7ac103e8d4ecd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-fd51fad5e0b090d6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-ad92008a67236aed", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-e0e209125dcaeed2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-retryablehttp-e0e623ea3aef7607", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-secure-stdlib-parseutil-ad8456c4c3cf1a76", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-secure-stdlib-strutil-95341417fe70325c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-sockaddr-b90e7112cd4a5127", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-uuid-6643792428ebab68", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-8418983d4499589d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-ed0de39ed4c5a960", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-huandu-xstrings-b2a5ddf0f545b7c1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jcmturner-aescts-v2-e78bc2a9570d6f17", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jcmturner-dnsutils-v2-f23df538048210fd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jcmturner-gofork-bc1fa81ee4f4d126", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jcmturner-goidentity-v6-737cecefa7f55c16", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jcmturner-gokrb5-v8-4d48e17db2d8bdc8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jcmturner-rpc-v2-72abd17a9bd23aea", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jonboulle-clockwork-79673d7d6f31a233", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-lib-pq-9efb87cc10b2719f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattermost-xml-roundtrip-validator-86611180d3097734", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-sqlite3-fb711fe054b828a8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-3bc14171d483b119", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-d24f7d23a17992cf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-mapstructure-0be713daa1161c9b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-6d52ba4da158e755", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-munnerz-goautoneg-b9dfa0adbcb09ff7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oklog-run-80a9a9bd310f4dbc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-openbao-openbao-api-v2-b15fd85395c236fd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-philhofer-fwd-a7bb2a71a771ecd1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-errors-805deee25838bc13", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pquerna-otp-913be8f85e94beb1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-prometheus-client-golang-e6c6299adca4badc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-prometheus-client-model-00a4cb062feee677", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-prometheus-common-3be4a4f5ed39e59a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-prometheus-procfs-a0c72f75b3121b33", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-russellhaering-goxmldsig-0f47bc5e79a32e3b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-ryanuber-go-glob-e71d8196f17ee4a7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-shopspring-decimal-c66802a249115f78", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-cast-994ee05d78625e18", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-cobra-2f1b7f9f6dd72e1f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-pflag-772707d6a1821117", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tinylib-msgp-a275e3d11a82359c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-x448-float16-0b2204cb9796a42b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-959368c1fb7bf140", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-yaml-1457c2798420112e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.etcd.io-etcd-api-v3-5e637c17362041f0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.etcd.io-etcd-client-pkg-v3-b61aeb81c7efd0eb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.etcd.io-etcd-client-v3-46a8d5678cff569b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-bf84e29308c71473", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-cb7909a476018297", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-41e9fbfc57119363", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-ff3f182fbd0cdb6c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-99370ed076b9216e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.uber.org-multierr-b168f633cba7c795", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.uber.org-zap-329815d4cf6e300c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-crypto-cfde819df4c6b939", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-exp-dfe7eba61631b803", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-mod-60ee454464914a0a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-net-10a4bb7de3ed016e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-oauth2-f33316132920cd69", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sys-6c873849a754be86", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-text-373cd3bb2b5cb4ef", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-time-9ff1cf69c3b74d01", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-api-6b2c44e2f6a00a90", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-da605449ea7588e1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-82e952ebc66b98c5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-grpc-1e0a629c2e187090", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-protobuf-0521c5f844ce36ef", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-gopkg.in-yaml.v2-334ef4a5772a819f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-2d5184aa4d6a34af", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-stdlib-f082e63930a8c824", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-aarch64-dex", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.aarch64"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-0055873c0ce1a39b", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jonboulle-clockwork-008a81e8156b0c05", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-012aec78e8c156c1", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-020cde73632f458b", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-examples-go.mod-2792f6f74908cdb9", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-errors-021b14d5957d8935", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-go-grpc-prometheus-031b343b9c39f08c", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cel.dev-expr-046d37f2a3bdf87b", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kylelemons-godebug-054bf546a3d78ff8", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-s2a-go-0579247a5173a955", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.etcd.io-etcd-api-v3-05dd5f11dc1d3b23", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-05eb82ff5b803225", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-huandu-xstrings-0634db5052d02338", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-filippo.io-edwards25519-06417845d4479ea3", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-api-0924b8d1cb38e654", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-grpc-gateway-v2-092a9d571953cce5", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-haya14busa-action-cond-09bbb5c3014d98aa", "relatedSpdxElement": "SPDXRef-File-....github-workflows-artifacts.yaml-8427f57ab80d38fb", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-0a7b1f6b0e53a9d2", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tinylib-msgp-0c9c2dc6f0281eda", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-0ce69a3b63617c8c", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-0e68ee2a469f0834", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jcmturner-rpc-v2-0e9d26f9df25f829", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-common-0f58d85c7e917ff8", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-github-codeql-action-upload-sarif-0fc2ddf000b03f47", "relatedSpdxElement": "SPDXRef-File-...workflows-analysis-scorecard.yaml-159c69e81070772d", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ghodss-yaml-100d0e3197770c33", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-dexidp-dex-api-v2-109693075217a78b", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-examples-go.mod-2792f6f74908cdb9", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-filippo.io-edwards25519-11711ea11ebbab4f", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-cmp-12093e5e69de2716", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-asn1-ber-asn1-ber-12331bb1643ce5c5", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ryanuber-go-glob-123848f88ea99b58", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kylelemons-godebug-1508f18c3a374a13", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-tpm-154b8d427a8e0247", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-yaml.v2-15848299ac4cecd4", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-1608186ebc45257b", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-yaml-1678a7e36b57a46e", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-17921bc3f2f4444b", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-upload-artifact-17d55088ce31e203", "relatedSpdxElement": "SPDXRef-File-....github-workflows-artifacts.yaml-8427f57ab80d38fb", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-boombuler-barcode-17f09ae7110de681", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-yaml-19344e95f8e304db", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-shopspring-decimal-19af8ea56a342c55", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-tablewriter-1a08e08ac93bfdcf", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-1b05c08544598108", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-1c59d62db54de586", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-workflow-.-.github-workflows-artifacts.yaml-1c6f585d6bd57b8e", "relatedSpdxElement": "SPDXRef-File-....github-workflows-release.yaml-ef570a04b59582ed", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-stretchr-testify-1c97414159f99a65", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-tools-1d0c1f0fc356ce03", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-openbao-openbao-api-v2-1d59dca43288b181", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ghodss-yaml-1da7d4fbb85390fb", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-1e15815490689fcc", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-1e540524363c17ee", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-api-v2-go.mod-9d6043f497642d4c", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-cache-save-1ebd149791f56cf1", "relatedSpdxElement": "SPDXRef-File-....github-workflows-trivydb-cache.yaml-e624209b5accdadd", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-uuid-20723cf3bd4774fe", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-displaywidth-207777caeda17856", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-21924c216340421a", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-russellhaering-goxmldsig-22ba3ce070cc22c7", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-22bf94b873e909e4", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-2424c9dad0739e6e", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-oklog-run-24255b6b3952bced", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-262f1f13b256c486", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-api-v2-go.mod-9d6043f497642d4c", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-semver-269202069433522d", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-huandu-xstrings-28513728da5fae88", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-28648b132f1b30a4", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-287213c18b3cbd37", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-docker-setup-buildx-action-289e24b192ca6fd2", "relatedSpdxElement": "SPDXRef-File-....github-workflows-artifacts.yaml-8427f57ab80d38fb", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-28fa02a12896cbbd", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-2946d2fad4a39755", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Azure-go-ntlmssp-2a5d72c123e5e3ba", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-2a624276f70575e9", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-inconshreveable-mousetrap-2b6a0269dfed7ee0", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-2b6a423eb5109854", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-shopspring-decimal-2b841af0806f728f", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-exp-2cd0d49d181ff358", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jonboulle-clockwork-2cfa6caaff37496a", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-munnerz-goautoneg-2d33de0c2e03c980", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-2dcf09ad9dbcfa62", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-oauth2-2e730bac8336b8f7", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-errors-2f2b4a7ce7872628", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-procfs-30762ea71a8c40b0", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-373728952659f9dc", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-sockaddr-3767ecd5401149b7", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-oidc-v3-383875e9e47f9ea0", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-examples-go.mod-2792f6f74908cdb9", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-397f8dbef55bcd1c", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-lib-pq-3a27848f8a555c82", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gorilla-mux-3aaebf4b073c46e0", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-oklog-run-3cb5c6ec62e0ec31", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-anchore-sbom-action-download-syft-3dc6b4d79fd7888d", "relatedSpdxElement": "SPDXRef-File-....github-workflows-artifacts.yaml-8427f57ab80d38fb", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-helm-kind-action-3df1df68d414b75b", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-.github-workflows-ci.yaml-7b9f797dfb3d8f18", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-3fa22a51053bed05", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-upload-artifact-4112e292dfa08547", "relatedSpdxElement": "SPDXRef-File-...workflows-analysis-scorecard.yaml-159c69e81070772d", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-x448-float16-413366d78e6a286c", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-webauthn-x-41875f8fedfee9c9", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-41e8cdd8f0d5486d", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-semver-42de5ece53fc3dae", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-4396ef269c0fff20", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-44163de5007e6449", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-44dd202f1c6449c3", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jcmturner-gofork-46ab21236d97baa7", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-cmp-473d0adb4b419c7e", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-tools-go-packages-packagestest-480d0f2ee6fb9912", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jcmturner-goidentity-v6-48916d9c7835a5d5", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-48dc84bfeb149d32", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-4965ce56f389a709", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-examples-go.mod-2792f6f74908cdb9", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-4a60e6f3f9cac2b0", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-4a7180a3454dcfdc", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-beorn7-perks-4b7f4d17e7911c1a", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-sqlite3-4c47d79d3295542f", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-4ef847efd9374369", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-oauth2-4f5748c31ea973f6", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-examples-go.mod-2792f6f74908cdb9", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-4fc93c87aeebc64b", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cel.dev-expr-50296d5ce895996f", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-secure-stdlib-parseutil-507b1688501fc20a", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fatih-color-5091b8ef7b342e64", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-50bf6051e43e2577", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-secure-stdlib-strutil-50e0a12f2906f0e0", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-545b2b2ddc61bef5", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-tablewriter-547ef0cc5cc277e7", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-54bcc746f2ab7987", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-openapi-inflect-55eaf8a8bd46fabe", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-56b7e6360dd390d7", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-mod-56d232e7120c3a8b", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-570c05adfc419665", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-api-57b3d177fae051c4", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-sql-driver-mysql-5842a4832b626749", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-oras-project-setup-oras-5961ae78a62c1e51", "relatedSpdxElement": "SPDXRef-File-....github-workflows-trivydb-cache.yaml-e624209b5accdadd", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-sqlite3-5c90825f54ef8bbb", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-5d5f1af24474e591", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-5d64ad5913a6841c", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-docker-metadata-action-5e23cf461e3a78ee", "relatedSpdxElement": "SPDXRef-File-....github-workflows-artifacts.yaml-8427f57ab80d38fb", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-common-5e45d1c167355b75", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cenkalti-backoff-v5-5e9265ff67aa38c8", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.etcd.io-etcd-client-v3-5f8a1aca09840598", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-62dec156dcfc8719", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-examples-go.mod-2792f6f74908cdb9", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-philhofer-fwd-64659f6d69d78aab", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-agext-levenshtein-64d88b1cfcc4917a", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-6521de1428969234", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.etcd.io-etcd-client-v3-65926145b687f438", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-683fad220f58d434", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.uber.org-zap-6854f837c762d43b", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-6907cc69c8a451c3", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-examples-go.mod-2792f6f74908cdb9", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-694568167dcb7bb1", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-ariga.io-atlas-69cbfea5335b2788", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-69e67edfc2286e18", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-checkout-6a2571a5717d4403", "relatedSpdxElement": "SPDXRef-File-...workflows-analysis-scorecard.yaml-159c69e81070772d", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-time-6a3bdc5173ed69ad", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-AppsFlyer-go-sundheit-6ae9a2700490b968", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-6d57c1dda6ac8df3", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-lib-pq-6e44ce0064e1f822", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-mod-6e91029e7c115a69", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fatih-color-71360e4063543be3", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-716c668b92999095", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-mheap-github-action-required-labels-718b9f7135e38ad3", "relatedSpdxElement": "SPDXRef-File-....github-workflows-checks.yaml-ead1312ab2fab5dd", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-sigstore-cosign-installer-731c0eff1fc86911", "relatedSpdxElement": "SPDXRef-File-....github-workflows-artifacts.yaml-8427f57ab80d38fb", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-73529cb77374f1e3", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-sockaddr-742b5b2e39ea7897", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-74fc58d4ffd07775", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-russellhaering-goxmldsig-75da907dddfc0e29", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-75ed7e22622e57c6", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-77be38dc77d54295", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-webauthn-x-78467a839f87314f", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-stringish-7898d637687b3054", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-errors-7b870bcf188ab90f", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-7c1bba4d36bdb7ac", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-examples-go.mod-2792f6f74908cdb9", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pquerna-otp-7dcbb024c570d5ba", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-x448-float16-7fd971e925528f79", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-ariga.io-atlas-807935f7a5ecb8fb", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-client-golang-810959e0f14bbea3", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-docker-build-push-action-8117317f720f24bf", "relatedSpdxElement": "SPDXRef-File-....github-workflows-artifacts.yaml-8427f57ab80d38fb", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-yaml.v2-81ad48257d4a7210", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-semver-81f0e684e432a579", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-retryablehttp-82e2538e01314882", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-ll-8326a56c7dfeea95", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jcmturner-rpc-v2-832dd4d9e8128187", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.etcd.io-etcd-api-v3-835ea6f00c58b847", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-845a5a9f8e5845b3", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-api-v2-go.mod-9d6043f497642d4c", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gorilla-handlers-86ee2d7671b2bd51", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-procfs-878089afee5fa76e", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-8946d0e2b7ce5ab6", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-89a232cdf633dbd1", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-dependency-review-action-8a623f4132573f38", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-.github-workflows-ci.yaml-7b9f797dfb3d8f18", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-8c070cee1582961d", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ryanuber-go-glob-8c4bce93abdb8637", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-attest-build-provenance-8d3c9891ba21f013", "relatedSpdxElement": "SPDXRef-File-....github-workflows-artifacts.yaml-8427f57ab80d38fb", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-ll-8da47cec8235dbea", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-tpm-8dbf9538ec5496e2", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-8e2f51f20e774df3", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-8e426af775fa3244", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-8fea4eb90b377a38", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-8ff48d2274ef05f6", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-examples-go.mod-2792f6f74908cdb9", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-time-90e57fc7c651498e", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-912d0981a4a0e36c", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fxamacker-cbor-v2-9146569dc901db6e", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-displaywidth-9278c8415c55c06c", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-sql-driver-mysql-95196d84cb9c0e92", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Azure-go-ntlmssp-965661720fffe566", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-stringish-9795481afef48435", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-entgo.io-ent-98323cc58705b998", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-webauthn-webauthn-984ab760de7ab683", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-993ea55f7ccdb0d0", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-999bbc4d5a4e5672", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jcmturner-gokrb5-v8-9a23e127cb00ed1f", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-uuid-9beb899c05e02450", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-9c2c251e5aa7943c", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-antlr4-go-antlr-v4-9c5df3dfc7e51ef2", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-cache-9f1876fc8a0e7861", "relatedSpdxElement": "SPDXRef-File-....github-workflows-artifacts.yaml-8427f57ab80d38fb", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.uber.org-multierr-9f9321b6484ab349", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-semver-9f9785da82e0d3db", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-a00544d9cf935bfa", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-secure-stdlib-strutil-a0780576d5c1f47c", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-a08603254284a9b5", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-agext-levenshtein-a0d3a279d1e1c9ba", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-s2a-go-a30ef8f4ba34534f", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-client-model-a37501789b93a9d0", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-client-golang-a514cc48df50cef4", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-golang-protobuf-a5af37d81c019e99", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jcmturner-goidentity-v6-a633a9894194fb36", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gorilla-mux-a63e13f40720e1cd", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fxamacker-cbor-v2-a63e67c151e3bd64", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jcmturner-aescts-v2-a6597e99e4b0ef11", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-a67a1cbae51586b4", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-a851e9ed7528ae45", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-a9123a7cdb8224b1", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-a9c9205e4790f5e8", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-api-v2-go.mod-9d6043f497642d4c", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-aaf4307e8bf5eb4c", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-beorn7-perks-ad2cac82a398f573", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-ad57399cb3c994ee", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattermost-xml-roundtrip-validator-ae412c7656f2b120", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jcmturner-gofork-af63e97c1b59179e", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-retryablehttp-af7796e4ac458aa1", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-afa40991728a2ca2", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-b085cd8b0a1796c0", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-b3d879cd60d2aaba", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-tools-go-packages-packagestest-b45858aab8ad58db", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-dario.cat-mergo-b4ba68c30201f517", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-webauthn-webauthn-b76f86f39f30327c", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-b7b86639fad9fc6e", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-AppsFlyer-go-sundheit-b7c54a953186a697", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-b83d91aaa1a3b761", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-grpc-gateway-v2-b8c8eb6cc916a0bf", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-b8f714bc940dd631", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jcmturner-dnsutils-v2-b97e52079da59075", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-b9e1999c62408e4d", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-dexidp-dex-api-v2-b9e4c71414c2732c", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-oidc-v3-bc364aa881cfb2e7", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-mapstructure-bc9d898a9a76e666", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.etcd.io-etcd-client-pkg-v3-be8c25b1e7b39f24", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-cat-bebcd8c7e0abbf91", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-c04d63d3f10bb59a", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-go-grpc-prometheus-c07b049c1dcd89f4", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattermost-xml-roundtrip-validator-c07fe36b128dc7b5", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-v22-c08ebf1e1441a49b", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-docker-login-action-c0964dc37b6b69d0", "relatedSpdxElement": "SPDXRef-File-....github-workflows-artifacts.yaml-8427f57ab80d38fb", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-cel-go-c10389b4b5a11476", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-c1575fca953a051b", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-c278a7951f223179", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-checkout-c3840c4442611bc9", "relatedSpdxElement": "SPDXRef-File-....github-workflows-artifacts.yaml-8427f57ab80d38fb", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jcmturner-gokrb5-v8-c47a3788d228e4f8", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-antlr4-go-antlr-v4-c4b83ef3d4f3b430", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-cat-c5c6fdf28a7dd8b0", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-c74d20d9e8fef7db", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-examples-go.mod-2792f6f74908cdb9", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-openapi-inflect-c808959165797986", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-checkout-c80c1234042624c8", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-.github-workflows-ci.yaml-7b9f797dfb3d8f18", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jcmturner-aescts-v2-c8cd000cd423289c", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-dario.cat-mergo-c918163fc2b8b714", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-cc8a68434418de52", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-examples-go.mod-2792f6f74908cdb9", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pquerna-otp-d29ac8b0c875db04", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-d2c68185074da7ad", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-workflow-.-.github-workflows-artifacts.yaml-d39fecea2c00cdf8", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-.github-workflows-ci.yaml-7b9f797dfb3d8f18", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-d4640bed903fe9da", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-dexidp-dex-api-v2-d4b3abb86db9ecda", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-stretchr-testify-d64a25dace8d069c", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-d6d9650a5d10d363", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-d6e204d5b39cc3d9", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jcmturner-dnsutils-v2-d7ae7f9dcd69e5fa", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-mapstructure-d7dc97acead2de58", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-openbao-openbao-api-v2-d816e67cf3d67e86", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-munnerz-goautoneg-d91f1d8d4c5a9536", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-github-codeql-action-upload-sarif-da5634acc9854a39", "relatedSpdxElement": "SPDXRef-File-....github-workflows-artifacts.yaml-8427f57ab80d38fb", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-boombuler-barcode-da910c4bbf11d591", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-secure-stdlib-parseutil-db6ab3358b7e5b03", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-de8cf9e8c7807317", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-dea5341837517a64", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-beevik-etree-decd13bbd3c90b82", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-df54a8ebe8dd4d5d", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-inconshreveable-mousetrap-df5e3f507c67348c", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-examples-go.mod-2792f6f74908cdb9", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-v22-df82ff7b5a85e27a", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-philhofer-fwd-dfccb2e8441322bc", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.uber.org-zap-e05cb2d4583bc5be", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-e395ab6147e93076", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-client-model-e39788339fdca7d5", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-e406d1260ec16639", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-oauth2-e473e8d0983fdebc", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-ossf-scorecard-action-e4c6a6acab396d23", "relatedSpdxElement": "SPDXRef-File-...workflows-analysis-scorecard.yaml-159c69e81070772d", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-e510c6d0e2e8ee78", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-api-v2-go.mod-9d6043f497642d4c", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-e5467bd9f58d3619", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-oidc-v3-e5919b0d2d6e62f0", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-cel-go-e6b05ae4aca312cd", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-aquasecurity-trivy-action-e6d71cbedfa5e26f", "relatedSpdxElement": "SPDXRef-File-....github-workflows-artifacts.yaml-8427f57ab80d38fb", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-beevik-etree-e7059bb24d3f7fcc", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-e7ea171e01c5d1df", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-errors-e7ef83ee0b787551", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-e843ca0a7a8cdac3", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gorilla-handlers-e95f781843ad56d6", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-golang-protobuf-e9c488508e67ae88", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-docker-setup-qemu-action-e9f3e628604e9dab", "relatedSpdxElement": "SPDXRef-File-....github-workflows-artifacts.yaml-8427f57ab80d38fb", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-ldap-ldap-v3-ead17bfb74373a10", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-ldap-ldap-v3-eaf64cfe46eb6b7d", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-eb80253a3d4695a2", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-asn1-ber-asn1-ber-ebdfa3a539c7538b", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-entgo.io-ent-ec8085e6c791b538", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-ed7921825a53d3f4", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-python-codespell-ee00abe66a169021", "relatedSpdxElement": "SPDXRef-File-...otel-requirements.txt-b69fd806af1e91ad", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-eefe57a9be02650c", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.uber.org-multierr-ef196337207eb800", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.etcd.io-etcd-client-pkg-v3-f2581879a48e7c7e", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-f27770650f676674", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-exp-f2f0e8a92202b8bb", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-f3561b3cdbd04bb6", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-setup-go-f444a073e9f1ec37", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-.github-workflows-ci.yaml-7b9f797dfb3d8f18", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-f5ecc134d333a099", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-api-v2-go.mod-9d6043f497642d4c", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-inconshreveable-mousetrap-f6300927a9f6b106", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-f6424607fde0264b", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-f7138c5445d92489", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-f818ae593686b975", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tinylib-msgp-f8c265250f0c6293", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cenkalti-backoff-v5-f8e11116fb66effe", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-f9a727401b6a9791", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-f9dd1fc14784caaf", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-tools-fc7f3049d5dd0b3c", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-fcc2351cf40fd420", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-examples-go.mod-2792f6f74908cdb9", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cast-fd80b2f61b0c8f6b", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-fedd531424679f33", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-ff0cc4a1edecfddc", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-examples-go.mod-2792f6f74908cdb9", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cast-ff70be541f5e7ad4", "relatedSpdxElement": "SPDXRef-File-dex-2.46.0-go.mod-f202e571dbc8c5ce", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-workflow-.-.github-workflows-artifacts.yaml-d39fecea2c00cdf8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-workflow-.-.github-workflows-artifacts.yaml-1c6f585d6bd57b8e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-attest-build-provenance-8d3c9891ba21f013", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-cache-9f1876fc8a0e7861", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-cache-save-1ebd149791f56cf1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-checkout-6a2571a5717d4403", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-checkout-c3840c4442611bc9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-checkout-c80c1234042624c8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-dependency-review-action-8a623f4132573f38", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-setup-go-f444a073e9f1ec37", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-upload-artifact-4112e292dfa08547", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-upload-artifact-17d55088ce31e203", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-anchore-sbom-action-download-syft-3dc6b4d79fd7888d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-aquasecurity-trivy-action-e6d71cbedfa5e26f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-ariga.io-atlas-69cbfea5335b2788", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-ariga.io-atlas-807935f7a5ecb8fb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-cel.dev-expr-046d37f2a3bdf87b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-cel.dev-expr-50296d5ce895996f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-auth-1608186ebc45257b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-auth-6d57c1dda6ac8df3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-287213c18b3cbd37", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-2a624276f70575e9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-df54a8ebe8dd4d5d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-c1575fca953a051b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-python-codespell-ee00abe66a169021", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-dario.cat-mergo-b4ba68c30201f517", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-dario.cat-mergo-c918163fc2b8b714", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-docker-build-push-action-8117317f720f24bf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-docker-login-action-c0964dc37b6b69d0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-docker-metadata-action-5e23cf461e3a78ee", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-docker-setup-buildx-action-289e24b192ca6fd2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-docker-setup-qemu-action-e9f3e628604e9dab", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-entgo.io-ent-98323cc58705b998", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-entgo.io-ent-ec8085e6c791b538", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-filippo.io-edwards25519-11711ea11ebbab4f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-filippo.io-edwards25519-06417845d4479ea3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-AppsFlyer-go-sundheit-b7c54a953186a697", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-AppsFlyer-go-sundheit-6ae9a2700490b968", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Azure-go-ntlmssp-965661720fffe566", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Azure-go-ntlmssp-2a5d72c123e5e3ba", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-0e68ee2a469f0834", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-4a60e6f3f9cac2b0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Masterminds-semver-81f0e684e432a579", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Masterminds-semver-269202069433522d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-74fc58d4ffd07775", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-b8f714bc940dd631", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-d4640bed903fe9da", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-17921bc3f2f4444b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-agext-levenshtein-a0d3a279d1e1c9ba", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-agext-levenshtein-64d88b1cfcc4917a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-antlr4-go-antlr-v4-9c5df3dfc7e51ef2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-antlr4-go-antlr-v4-c4b83ef3d4f3b430", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-5d5f1af24474e591", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-e406d1260ec16639", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-beevik-etree-decd13bbd3c90b82", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-beevik-etree-e7059bb24d3f7fcc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-beorn7-perks-ad2cac82a398f573", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-beorn7-perks-4b7f4d17e7911c1a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-b9e1999c62408e4d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-f3561b3cdbd04bb6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-boombuler-barcode-17f09ae7110de681", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-boombuler-barcode-da910c4bbf11d591", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cenkalti-backoff-v5-f8e11116fb66effe", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cenkalti-backoff-v5-5e9265ff67aa38c8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-1e15815490689fcc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-44163de5007e6449", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-clipperhouse-displaywidth-207777caeda17856", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-clipperhouse-displaywidth-9278c8415c55c06c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-clipperhouse-stringish-7898d637687b3054", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-clipperhouse-stringish-9795481afef48435", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-8e2f51f20e774df3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-f7138c5445d92489", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-coreos-go-oidc-v3-383875e9e47f9ea0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-coreos-go-oidc-v3-bc364aa881cfb2e7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-coreos-go-oidc-v3-e5919b0d2d6e62f0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-coreos-go-semver-42de5ece53fc3dae", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-coreos-go-semver-9f9785da82e0d3db", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-v22-c08ebf1e1441a49b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-v22-df82ff7b5a85e27a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-api-v2-109693075217a78b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-api-v2-d4b3abb86db9ecda", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-api-v2-b9e4c71414c2732c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fatih-color-5091b8ef7b342e64", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fatih-color-71360e4063543be3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-d2c68185074da7ad", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-21924c216340421a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-b085cd8b0a1796c0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-73529cb77374f1e3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fxamacker-cbor-v2-9146569dc901db6e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fxamacker-cbor-v2-a63e67c151e3bd64", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-ghodss-yaml-100d0e3197770c33", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-ghodss-yaml-1da7d4fbb85390fb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-asn1-ber-asn1-ber-ebdfa3a539c7538b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-asn1-ber-asn1-ber-12331bb1643ce5c5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-4965ce56f389a709", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-012aec78e8c156c1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-05eb82ff5b803225", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-ldap-ldap-v3-eaf64cfe46eb6b7d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-ldap-ldap-v3-ead17bfb74373a10", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-logr-eefe57a9be02650c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-logr-5d64ad5913a6841c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-stdr-c04d63d3f10bb59a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-stdr-ed7921825a53d3f4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-openapi-inflect-c808959165797986", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-openapi-inflect-55eaf8a8bd46fabe", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-sql-driver-mysql-95196d84cb9c0e92", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-sql-driver-mysql-5842a4832b626749", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-44dd202f1c6449c3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-69e67edfc2286e18", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-webauthn-webauthn-b76f86f39f30327c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-webauthn-webauthn-984ab760de7ab683", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-webauthn-x-78467a839f87314f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-webauthn-x-41875f8fedfee9c9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-77be38dc77d54295", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-a9123a7cdb8224b1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-golang-protobuf-a5af37d81c019e99", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-golang-protobuf-e9c488508e67ae88", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-cel-go-c10389b4b5a11476", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-cel-go-e6b05ae4aca312cd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-cmp-12093e5e69de2716", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-cmp-473d0adb4b419c7e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-tpm-8dbf9538ec5496e2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-tpm-154b8d427a8e0247", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-s2a-go-0579247a5173a955", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-s2a-go-a30ef8f4ba34534f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-uuid-694568167dcb7bb1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-uuid-f6424607fde0264b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-fedd531424679f33", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-ad57399cb3c994ee", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-545b2b2ddc61bef5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-2946d2fad4a39755", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gorilla-handlers-86ee2d7671b2bd51", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gorilla-handlers-e95f781843ad56d6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gorilla-mux-a63e13f40720e1cd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gorilla-mux-3aaebf4b073c46e0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-go-grpc-prometheus-c07b049c1dcd89f4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-go-grpc-prometheus-031b343b9c39f08c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-grpc-gateway-v2-092a9d571953cce5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-grpc-gateway-v2-b8c8eb6cc916a0bf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-89a232cdf633dbd1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-56b7e6360dd390d7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-2dcf09ad9dbcfa62", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-912d0981a4a0e36c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-8c070cee1582961d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-b3d879cd60d2aaba", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-retryablehttp-af7796e4ac458aa1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-retryablehttp-82e2538e01314882", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-secure-stdlib-parseutil-db6ab3358b7e5b03", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-secure-stdlib-parseutil-507b1688501fc20a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-secure-stdlib-strutil-a0780576d5c1f47c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-secure-stdlib-strutil-50e0a12f2906f0e0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-sockaddr-742b5b2e39ea7897", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-sockaddr-3767ecd5401149b7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-uuid-20723cf3bd4774fe", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-uuid-9beb899c05e02450", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-9c2c251e5aa7943c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-999bbc4d5a4e5672", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-e843ca0a7a8cdac3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-f818ae593686b975", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-huandu-xstrings-28513728da5fae88", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-huandu-xstrings-0634db5052d02338", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-inconshreveable-mousetrap-df5e3f507c67348c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-inconshreveable-mousetrap-2b6a0269dfed7ee0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-inconshreveable-mousetrap-f6300927a9f6b106", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jcmturner-aescts-v2-a6597e99e4b0ef11", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jcmturner-aescts-v2-c8cd000cd423289c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jcmturner-dnsutils-v2-d7ae7f9dcd69e5fa", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jcmturner-dnsutils-v2-b97e52079da59075", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jcmturner-gofork-46ab21236d97baa7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jcmturner-gofork-af63e97c1b59179e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jcmturner-goidentity-v6-48916d9c7835a5d5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jcmturner-goidentity-v6-a633a9894194fb36", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jcmturner-gokrb5-v8-c47a3788d228e4f8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jcmturner-gokrb5-v8-9a23e127cb00ed1f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jcmturner-rpc-v2-832dd4d9e8128187", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jcmturner-rpc-v2-0e9d26f9df25f829", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jonboulle-clockwork-2cfa6caaff37496a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jonboulle-clockwork-008a81e8156b0c05", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-kylelemons-godebug-1508f18c3a374a13", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-kylelemons-godebug-054bf546a3d78ff8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-lib-pq-3a27848f8a555c82", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-lib-pq-6e44ce0064e1f822", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattermost-xml-roundtrip-validator-c07fe36b128dc7b5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattermost-xml-roundtrip-validator-ae412c7656f2b120", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-75ed7e22622e57c6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-373728952659f9dc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-a851e9ed7528ae45", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-993ea55f7ccdb0d0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-b7b86639fad9fc6e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-2424c9dad0739e6e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-sqlite3-5c90825f54ef8bbb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-sqlite3-4c47d79d3295542f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-a67a1cbae51586b4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-a08603254284a9b5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-1b05c08544598108", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-e395ab6147e93076", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-mapstructure-bc9d898a9a76e666", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-mapstructure-d7dc97acead2de58", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-4ef847efd9374369", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-683fad220f58d434", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-munnerz-goautoneg-d91f1d8d4c5a9536", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-munnerz-goautoneg-2d33de0c2e03c980", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oklog-run-3cb5c6ec62e0ec31", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oklog-run-24255b6b3952bced", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-olekukonko-cat-c5c6fdf28a7dd8b0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-olekukonko-cat-bebcd8c7e0abbf91", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-olekukonko-errors-e7ef83ee0b787551", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-olekukonko-errors-7b870bcf188ab90f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-olekukonko-ll-8326a56c7dfeea95", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-olekukonko-ll-8da47cec8235dbea", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-olekukonko-tablewriter-1a08e08ac93bfdcf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-olekukonko-tablewriter-547ef0cc5cc277e7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-openbao-openbao-api-v2-1d59dca43288b181", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-openbao-openbao-api-v2-d816e67cf3d67e86", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-philhofer-fwd-64659f6d69d78aab", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-philhofer-fwd-dfccb2e8441322bc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-errors-021b14d5957d8935", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-errors-2f2b4a7ce7872628", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pquerna-otp-d29ac8b0c875db04", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pquerna-otp-7dcbb024c570d5ba", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-prometheus-client-golang-810959e0f14bbea3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-prometheus-client-golang-a514cc48df50cef4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-prometheus-client-model-e39788339fdca7d5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-prometheus-client-model-a37501789b93a9d0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-prometheus-common-5e45d1c167355b75", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-prometheus-common-0f58d85c7e917ff8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-prometheus-procfs-30762ea71a8c40b0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-prometheus-procfs-878089afee5fa76e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-russellhaering-goxmldsig-22ba3ce070cc22c7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-russellhaering-goxmldsig-75da907dddfc0e29", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-ryanuber-go-glob-8c4bce93abdb8637", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-ryanuber-go-glob-123848f88ea99b58", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-shopspring-decimal-2b841af0806f728f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-shopspring-decimal-19af8ea56a342c55", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-cast-ff70be541f5e7ad4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-cast-fd80b2f61b0c8f6b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-cobra-c74d20d9e8fef7db", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-cobra-e7ea171e01c5d1df", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-cobra-aaf4307e8bf5eb4c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-pflag-cc8a68434418de52", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-pflag-0ce69a3b63617c8c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-pflag-e5467bd9f58d3619", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-stretchr-testify-1c97414159f99a65", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-stretchr-testify-d64a25dace8d069c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tinylib-msgp-0c9c2dc6f0281eda", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tinylib-msgp-f8c265250f0c6293", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-x448-float16-7fd971e925528f79", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-x448-float16-413366d78e6a286c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-6521de1428969234", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-de8cf9e8c7807317", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-yaml-19344e95f8e304db", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-yaml-1678a7e36b57a46e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-github-codeql-action-upload-sarif-0fc2ddf000b03f47", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-github-codeql-action-upload-sarif-da5634acc9854a39", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.etcd.io-etcd-api-v3-835ea6f00c58b847", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.etcd.io-etcd-api-v3-05dd5f11dc1d3b23", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.etcd.io-etcd-client-pkg-v3-f2581879a48e7c7e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.etcd.io-etcd-client-pkg-v3-be8c25b1e7b39f24", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.etcd.io-etcd-client-v3-65926145b687f438", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.etcd.io-etcd-client-v3-5f8a1aca09840598", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-f9dd1fc14784caaf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-a00544d9cf935bfa", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-b83d91aaa1a3b761", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-afa40991728a2ca2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-4396ef269c0fff20", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-f27770650f676674", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-8fea4eb90b377a38", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-f9a727401b6a9791", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-dea5341837517a64", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-8e426af775fa3244", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.uber.org-multierr-9f9321b6484ab349", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.uber.org-multierr-ef196337207eb800", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.uber.org-zap-6854f837c762d43b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.uber.org-zap-e05cb2d4583bc5be", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-0a7b1f6b0e53a9d2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-4fc93c87aeebc64b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-crypto-6907cc69c8a451c3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-crypto-41e8cdd8f0d5486d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-crypto-4a7180a3454dcfdc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-exp-f2f0e8a92202b8bb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-exp-2cd0d49d181ff358", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-mod-6e91029e7c115a69", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-mod-56d232e7120c3a8b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-net-f5ecc134d333a099", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-net-7c1bba4d36bdb7ac", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-net-d6d9650a5d10d363", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-net-50bf6051e43e2577", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-oauth2-4f5748c31ea973f6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-oauth2-e473e8d0983fdebc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-oauth2-2e730bac8336b8f7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sync-eb80253a3d4695a2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sync-1c59d62db54de586", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sys-845a5a9f8e5845b3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sys-8ff48d2274ef05f6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sys-2b6a423eb5109854", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sys-22bf94b873e909e4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-text-e510c6d0e2e8ee78", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-text-ff0cc4a1edecfddc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-text-48dc84bfeb149d32", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-text-8946d0e2b7ce5ab6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-time-6a3bdc5173ed69ad", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-time-90e57fc7c651498e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-tools-fc7f3049d5dd0b3c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-tools-1d0c1f0fc356ce03", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-tools-go-packages-packagestest-b45858aab8ad58db", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-tools-go-packages-packagestest-480d0f2ee6fb9912", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-api-0924b8d1cb38e654", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-api-57b3d177fae051c4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-570c05adfc419665", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-d6e204d5b39cc3d9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-a9c9205e4790f5e8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-020cde73632f458b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-397f8dbef55bcd1c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-28fa02a12896cbbd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-grpc-1e540524363c17ee", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-grpc-fcc2351cf40fd420", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-grpc-28648b132f1b30a4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-grpc-54bcc746f2ab7987", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-protobuf-262f1f13b256c486", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-protobuf-62dec156dcfc8719", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-protobuf-3fa22a51053bed05", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-protobuf-0055873c0ce1a39b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-gopkg.in-yaml.v2-81ad48257d4a7210", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-gopkg.in-yaml.v2-15848299ac4cecd4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-c278a7951f223179", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-716c668b92999095", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-haya14busa-action-cond-09bbb5c3014d98aa", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-helm-kind-action-3df1df68d414b75b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-mheap-github-action-required-labels-718b9f7135e38ad3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-oras-project-setup-oras-5961ae78a62c1e51", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-ossf-scorecard-action-e4c6a6acab396d23", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-sigstore-cosign-installer-731c0eff1fc86911", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.src"}, {"spdxElementId": "SPDXRef-Package-rpm-dex-f401416d40ff6a46", "relatedSpdxElement": "SPDXRef-File-...bin-dex-2.46.0-0.1.hum1.aarch64.debug-8a8e6212c419f48d", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-debuginfo-2.46.0-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-rpm-dex-f401416d40ff6a46", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-dex-debuginfo-2.46.0-0.1.hum1.aarch64", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-aarch64-dex-debuginfo", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-dex-debuginfo-2.46.0-0.1.hum1.aarch64"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-dex-debugsource-2.46.0-0.1.hum1.aarch64", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-aarch64-dex-debugsource", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-dex-debugsource-2.46.0-0.1.hum1.aarch64"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-038da0ea77c7d7cf", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-0446c7d253f4528d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-shopspring-decimal-0835b07a031b9ddf", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-semver-0eb994ebe34e7363", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-philhofer-fwd-0f9373c02bb4cebe", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jcmturner-goidentity-v6-115252bdee054cad", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-openbao-openbao-api-v2-11a3e698551910da", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-147c9550c47d43f1", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-x448-float16-19b431edf9f015b0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-russellhaering-goxmldsig-1c6eaa8d6ea9c53c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-1e5ff660de9aa7e5", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-1f88fd07d5eae0b5", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-secure-stdlib-parseutil-232e9db339c38dcd", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-2872019f62dcca1d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-AppsFlyer-go-sundheit-321a1a5ed143c4c0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-agext-levenshtein-36be5403aadd8273", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-procfs-382857ff98eb0a48", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jonboulle-clockwork-3928e2db080f96f8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cenkalti-backoff-v5-3a2bd314924ed96d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-exp-3d8b5d853a935abc", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-3e2b42ab0c5256ba", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-3e5e2f480b5b9255", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-3fe1e00e2b4234f8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-406b47b92fc57614", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-49a19d7fe2e8d442", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-common-4b31fe07434677b9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-tpm-518c9c88753c028f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-51f849ef3d2ee82f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-client-golang-5222f7aa5bae7d73", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fxamacker-cbor-v2-596006188f5063a7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-5a80ab4ff0eb9077", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-asn1-ber-asn1-ber-5afbf92933833c57", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gorilla-handlers-5b67d560ae3c02bd", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-60c34d277a360af3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-6112c38a94cd0ace", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-client-model-66d3cecf26aeef60", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-retryablehttp-6733d6bb212fa914", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-676a8a4f1304862f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-golang-protobuf-68b02c3cd344d0bd", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cast-69189b6d27a1c2a3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-sqlite3-6b39a753e9d4bf23", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jcmturner-dnsutils-v2-6eba998bb0b7a052", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jcmturner-gofork-73af6a2f564c4b2d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.etcd.io-etcd-api-v3-74d5ac5747854d43", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-757c3b456add09b0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-77a3d7374b1cea3c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-yaml.v2-791db659b62a25a4", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-799427d636bf0294", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-huandu-xstrings-7b211603fa66dada", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-7b25fd45f474b596", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-7e18795acc87c004", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-814a7ca2649a01c2", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-oauth2-82bd599ae8656496", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-831a722382d4fc44", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-munnerz-goautoneg-8332c30025d7181c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-sockaddr-8436b87dccc39730", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-entgo.io-ent-84ed5033650a0690", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-boombuler-barcode-87224cd6cd6f65ed", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-errors-881322be62b7bbd4", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-ariga.io-atlas-8b3b0bc45a315f19", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Azure-go-ntlmssp-8c390b081b3d873d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-8e7b2e4116ccad3c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-8f460e686283cd4a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-s2a-go-93e2e60c860c4810", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jcmturner-gokrb5-v8-93ec61d53f843763", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.etcd.io-etcd-client-v3-95b7bad531b4850c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jcmturner-aescts-v2-96b1e072d2efc12c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-9d96567a5e0f2863", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-mod-9dc2c09fbe0a9575", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-beevik-etree-9f7ee60051291021", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-openapi-inflect-a0117dc3ddbb9dd9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-mapstructure-a06ee83b8beb9da8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-a08fe66fc9539613", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.uber.org-zap-a0d4d4f1f62d36bb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gorilla-mux-a1ffe1740a6d70a8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-semver-a2f0c8181fcf01d4", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-a5aaae7cecf61cc4", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-abec65de8982176f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-webauthn-webauthn-b212d11febc37490", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-dario.cat-mergo-b427ceac60915ba8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-go-grpc-prometheus-b4bd70f05ff75f03", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-b65b5e6a03578367", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-b69e6ed57879b4ae", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-b6d3a9884952cb38", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.etcd.io-etcd-client-pkg-v3-b8fe7810ffe2eff8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-grpc-gateway-v2-bd5e4b2ac7568892", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-c0167b724e150176", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-api-c3cf2612761e5f5b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-oidc-v3-c6fef63c4b574c19", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-v22-c8a056c81c003d13", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-.-api-v2-cbf365d15e0d4a6e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jcmturner-rpc-v2-cc5190389d530471", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-uuid-cd9249e1429ad66f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-ce4d18b9bce61578", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-lib-pq-cefab2817e76bea0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tinylib-msgp-d2588377aac99593", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-d58c20d03ac97133", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-beorn7-perks-d906ccad8d24cb14", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-da334fcc660bdaa5", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-db3950f37869d400", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-de83778242e77384", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-yaml-de934ca1dbcb06d5", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-webauthn-x-ded9d3e734edb535", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-e223b74fa8687bc2", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-e53ce01add95a36c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-oklog-run-e6dfbd22a244b9e7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-e892a89a03b2718c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-time-e971e780b602f23a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-cmp-ed72f71279c01785", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattermost-xml-roundtrip-validator-ee2e4577afefa673", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-filippo.io-edwards25519-ee5250f77e3ed14e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pquerna-otp-ee669b96f0cdf90a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-efea43c1c672f847", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-stdlib-f082e63930a8c824", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-f6c3ec7b74433e20", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ryanuber-go-glob-f7c10ccc394b3298", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-secure-stdlib-strutil-f85cba3c191cd67f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.uber.org-multierr-fa52f4dd2701d406", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-sql-driver-mysql-fbf99dc28c73ba2f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-ldap-ldap-v3-fc174082cfa1ede8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-fc43110d9ba69185", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ghodss-yaml-ff7b88d947ebddf7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-038da0ea77c7d7cf", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-0446c7d253f4528d", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-shopspring-decimal-0835b07a031b9ddf", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-semver-0eb994ebe34e7363", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-philhofer-fwd-0f9373c02bb4cebe", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jcmturner-goidentity-v6-115252bdee054cad", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-openbao-openbao-api-v2-11a3e698551910da", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-147c9550c47d43f1", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-x448-float16-19b431edf9f015b0", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-russellhaering-goxmldsig-1c6eaa8d6ea9c53c", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-1e5ff660de9aa7e5", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-1f88fd07d5eae0b5", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-rpm-dex-2062246074bdc5c6", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-secure-stdlib-parseutil-232e9db339c38dcd", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-2872019f62dcca1d", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-AppsFlyer-go-sundheit-321a1a5ed143c4c0", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-agext-levenshtein-36be5403aadd8273", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-procfs-382857ff98eb0a48", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jonboulle-clockwork-3928e2db080f96f8", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cenkalti-backoff-v5-3a2bd314924ed96d", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-exp-3d8b5d853a935abc", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-3e2b42ab0c5256ba", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-3e5e2f480b5b9255", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-3fe1e00e2b4234f8", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-406b47b92fc57614", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-49a19d7fe2e8d442", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-common-4b31fe07434677b9", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-tpm-518c9c88753c028f", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-51f849ef3d2ee82f", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-client-golang-5222f7aa5bae7d73", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fxamacker-cbor-v2-596006188f5063a7", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-5a80ab4ff0eb9077", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-asn1-ber-asn1-ber-5afbf92933833c57", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gorilla-handlers-5b67d560ae3c02bd", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-60c34d277a360af3", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-6112c38a94cd0ace", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-client-model-66d3cecf26aeef60", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-retryablehttp-6733d6bb212fa914", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-676a8a4f1304862f", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-golang-protobuf-68b02c3cd344d0bd", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cast-69189b6d27a1c2a3", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-sqlite3-6b39a753e9d4bf23", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jcmturner-dnsutils-v2-6eba998bb0b7a052", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jcmturner-gofork-73af6a2f564c4b2d", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.etcd.io-etcd-api-v3-74d5ac5747854d43", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-757c3b456add09b0", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-77a3d7374b1cea3c", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-yaml.v2-791db659b62a25a4", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-799427d636bf0294", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-huandu-xstrings-7b211603fa66dada", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-7b25fd45f474b596", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-7e18795acc87c004", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-814a7ca2649a01c2", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-oauth2-82bd599ae8656496", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-831a722382d4fc44", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-munnerz-goautoneg-8332c30025d7181c", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-sockaddr-8436b87dccc39730", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-entgo.io-ent-84ed5033650a0690", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-boombuler-barcode-87224cd6cd6f65ed", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-errors-881322be62b7bbd4", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-ariga.io-atlas-8b3b0bc45a315f19", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Azure-go-ntlmssp-8c390b081b3d873d", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-8e7b2e4116ccad3c", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-8f460e686283cd4a", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-s2a-go-93e2e60c860c4810", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jcmturner-gokrb5-v8-93ec61d53f843763", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.etcd.io-etcd-client-v3-95b7bad531b4850c", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jcmturner-aescts-v2-96b1e072d2efc12c", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-9d96567a5e0f2863", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-mod-9dc2c09fbe0a9575", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-beevik-etree-9f7ee60051291021", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-openapi-inflect-a0117dc3ddbb9dd9", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-mapstructure-a06ee83b8beb9da8", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-a08fe66fc9539613", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.uber.org-zap-a0d4d4f1f62d36bb", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gorilla-mux-a1ffe1740a6d70a8", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-semver-a2f0c8181fcf01d4", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-a5aaae7cecf61cc4", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-abec65de8982176f", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-webauthn-webauthn-b212d11febc37490", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-dario.cat-mergo-b427ceac60915ba8", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-go-grpc-prometheus-b4bd70f05ff75f03", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-b65b5e6a03578367", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-b69e6ed57879b4ae", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-b6d3a9884952cb38", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.etcd.io-etcd-client-pkg-v3-b8fe7810ffe2eff8", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-grpc-gateway-v2-bd5e4b2ac7568892", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-c0167b724e150176", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-api-c3cf2612761e5f5b", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-oidc-v3-c6fef63c4b574c19", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-v22-c8a056c81c003d13", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-.-api-v2-cbf365d15e0d4a6e", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jcmturner-rpc-v2-cc5190389d530471", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-uuid-cd9249e1429ad66f", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-ce4d18b9bce61578", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-lib-pq-cefab2817e76bea0", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tinylib-msgp-d2588377aac99593", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-d58c20d03ac97133", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-beorn7-perks-d906ccad8d24cb14", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-da334fcc660bdaa5", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-db3950f37869d400", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-de83778242e77384", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-yaml-de934ca1dbcb06d5", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-webauthn-x-ded9d3e734edb535", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-e223b74fa8687bc2", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-e53ce01add95a36c", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-oklog-run-e6dfbd22a244b9e7", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-e892a89a03b2718c", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-time-e971e780b602f23a", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-cmp-ed72f71279c01785", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattermost-xml-roundtrip-validator-ee2e4577afefa673", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-filippo.io-edwards25519-ee5250f77e3ed14e", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pquerna-otp-ee669b96f0cdf90a", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-efea43c1c672f847", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-stdlib-f082e63930a8c824", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-f6c3ec7b74433e20", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ryanuber-go-glob-f7c10ccc394b3298", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-secure-stdlib-strutil-f85cba3c191cd67f", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.uber.org-multierr-fa52f4dd2701d406", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-sql-driver-mysql-fbf99dc28c73ba2f", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-ldap-ldap-v3-fc174082cfa1ede8", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-fc43110d9ba69185", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ghodss-yaml-ff7b88d947ebddf7", "relatedSpdxElement": "SPDXRef-File-usr-bin-dex-c4396f103eb61b03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-.-api-v2-cbf365d15e0d4a6e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-ariga.io-atlas-8b3b0bc45a315f19", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-auth-e223b74fa8687bc2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-a08fe66fc9539613", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-3fe1e00e2b4234f8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-dario.cat-mergo-b427ceac60915ba8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-rpm-dex-2062246074bdc5c6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-entgo.io-ent-84ed5033650a0690", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-filippo.io-edwards25519-ee5250f77e3ed14e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-AppsFlyer-go-sundheit-321a1a5ed143c4c0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Azure-go-ntlmssp-8c390b081b3d873d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-757c3b456add09b0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Masterminds-semver-0eb994ebe34e7363", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-d58c20d03ac97133", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-147c9550c47d43f1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-agext-levenshtein-36be5403aadd8273", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-1f88fd07d5eae0b5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-beevik-etree-9f7ee60051291021", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-beorn7-perks-d906ccad8d24cb14", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-db3950f37869d400", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-boombuler-barcode-87224cd6cd6f65ed", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cenkalti-backoff-v5-3a2bd314924ed96d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-e892a89a03b2718c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-coreos-go-oidc-v3-c6fef63c4b574c19", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-coreos-go-semver-a2f0c8181fcf01d4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-v22-c8a056c81c003d13", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dexidp-dex-4feb9afec5bbd401", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-9d96567a5e0f2863", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-799427d636bf0294", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fxamacker-cbor-v2-596006188f5063a7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-ghodss-yaml-ff7b88d947ebddf7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-asn1-ber-asn1-ber-5afbf92933833c57", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-da334fcc660bdaa5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-ldap-ldap-v3-fc174082cfa1ede8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-logr-038da0ea77c7d7cf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-stdr-de83778242e77384", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-openapi-inflect-a0117dc3ddbb9dd9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-sql-driver-mysql-fbf99dc28c73ba2f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-60c34d277a360af3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-webauthn-webauthn-b212d11febc37490", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-webauthn-x-ded9d3e734edb535", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-c0167b724e150176", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-golang-protobuf-68b02c3cd344d0bd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-cmp-ed72f71279c01785", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-tpm-518c9c88753c028f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-s2a-go-93e2e60c860c4810", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-uuid-51f849ef3d2ee82f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-a5aaae7cecf61cc4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-efea43c1c672f847", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gorilla-handlers-5b67d560ae3c02bd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gorilla-mux-a1ffe1740a6d70a8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-go-grpc-prometheus-b4bd70f05ff75f03", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-grpc-gateway-v2-bd5e4b2ac7568892", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-0446c7d253f4528d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-49a19d7fe2e8d442", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-fc43110d9ba69185", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-retryablehttp-6733d6bb212fa914", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-secure-stdlib-parseutil-232e9db339c38dcd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-secure-stdlib-strutil-f85cba3c191cd67f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-sockaddr-8436b87dccc39730", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-uuid-cd9249e1429ad66f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-3e2b42ab0c5256ba", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-5a80ab4ff0eb9077", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-huandu-xstrings-7b211603fa66dada", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jcmturner-aescts-v2-96b1e072d2efc12c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jcmturner-dnsutils-v2-6eba998bb0b7a052", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jcmturner-gofork-73af6a2f564c4b2d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jcmturner-goidentity-v6-115252bdee054cad", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jcmturner-gokrb5-v8-93ec61d53f843763", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jcmturner-rpc-v2-cc5190389d530471", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jonboulle-clockwork-3928e2db080f96f8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-lib-pq-cefab2817e76bea0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattermost-xml-roundtrip-validator-ee2e4577afefa673", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-sqlite3-6b39a753e9d4bf23", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-7b25fd45f474b596", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-f6c3ec7b74433e20", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-mapstructure-a06ee83b8beb9da8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-8f460e686283cd4a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-munnerz-goautoneg-8332c30025d7181c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oklog-run-e6dfbd22a244b9e7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-openbao-openbao-api-v2-11a3e698551910da", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-philhofer-fwd-0f9373c02bb4cebe", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-errors-881322be62b7bbd4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pquerna-otp-ee669b96f0cdf90a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-prometheus-client-golang-5222f7aa5bae7d73", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-prometheus-client-model-66d3cecf26aeef60", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-prometheus-common-4b31fe07434677b9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-prometheus-procfs-382857ff98eb0a48", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-russellhaering-goxmldsig-1c6eaa8d6ea9c53c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-ryanuber-go-glob-f7c10ccc394b3298", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-shopspring-decimal-0835b07a031b9ddf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-cast-69189b6d27a1c2a3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-cobra-831a722382d4fc44", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-pflag-77a3d7374b1cea3c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tinylib-msgp-d2588377aac99593", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-x448-float16-19b431edf9f015b0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-abec65de8982176f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-yaml-de934ca1dbcb06d5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.etcd.io-etcd-api-v3-74d5ac5747854d43", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.etcd.io-etcd-client-pkg-v3-b8fe7810ffe2eff8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.etcd.io-etcd-client-v3-95b7bad531b4850c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-b6d3a9884952cb38", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-406b47b92fc57614", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-ce4d18b9bce61578", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-676a8a4f1304862f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-1e5ff660de9aa7e5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.uber.org-multierr-fa52f4dd2701d406", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.uber.org-zap-a0d4d4f1f62d36bb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-crypto-6112c38a94cd0ace", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-exp-3d8b5d853a935abc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-mod-9dc2c09fbe0a9575", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-net-2872019f62dcca1d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-oauth2-82bd599ae8656496", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sys-3e5e2f480b5b9255", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-text-e53ce01add95a36c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-time-e971e780b602f23a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-api-c3cf2612761e5f5b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-814a7ca2649a01c2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-b69e6ed57879b4ae", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-grpc-b65b5e6a03578367", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-protobuf-7e18795acc87c004", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-gopkg.in-yaml.v2-791db659b62a25a4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-8e7b2e4116ccad3c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-stdlib-f082e63930a8c824", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-x86-64-dex", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-dex-2.46.0-0.1.hum1.x86-64"}, {"spdxElementId": "SPDXRef-Package-rpm-dex-a7ecc7224de4c251", "relatedSpdxElement": "SPDXRef-File-...bin-dex-2.46.0-0.1.hum1.x86-64.debug-1400fbbc700a5840", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-dex-debuginfo-2.46.0-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-rpm-dex-a7ecc7224de4c251", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-dex-debuginfo-2.46.0-0.1.hum1.x86-64", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-x86-64-dex-debuginfo", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-dex-debuginfo-2.46.0-0.1.hum1.x86-64"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-dex-debugsource-2.46.0-0.1.hum1.x86-64", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-x86-64-dex-debugsource", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-dex-debugsource-2.46.0-0.1.hum1.x86-64"}], "documentDescribes": ["SPDXRef-SRPM", "SPDXRef-aarch64-dex", "SPDXRef-x86-64-dex", "SPDXRef-aarch64-dex-debuginfo", "SPDXRef-x86-64-dex-debuginfo", "SPDXRef-aarch64-dex-debugsource", "SPDXRef-x86-64-dex-debugsource"]}