{"spdxVersion": "SPDX-2.3", "dataLicense": "CC0-1.0", "SPDXID": "SPDXRef-DOCUMENT", "creationInfo": {"created": "2026-10-12T07:43:43Z", "creators": ["Tool: Konflux", "Organization: Fedora"]}, "name": "grype-0.119.0-0.2.hum1", "documentNamespace": "https://fedoraproject.org/grype-0.119.0-0.2.hum1.spdx.json", "packages": [{"SPDXID": "SPDXRef-SRPM", "name": "grype", "versionInfo": "0.119.0-0.2.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "grype-0.119.0-0.2.hum1.src.rpm", "licenseDeclared": "0BSD AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND CC0-1.0 AND ISC AND LicenseRef-Fedora-Public-Domain AND MIT AND MPL-2.0 AND Unlicense AND (Apache-2.0 OR GPL-2.0-or-later)", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/grype@0.119.0-0.2.hum1?arch=src"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "34fdd8cd91edc303f57d4562631ae9cee78412dc1f29d4c7009c4d9127cd2fc6"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: b'\\xe5Q\\xc0\\xa0\\xaf\\xff\\xc9]\\xa1f\\xf0U\\x9b\\x8fj\\xdc'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sha256header: 7fa4545faf6591d69355348d50dfd8a5f788b3085b356d484fc403dba7b2acf0"}]}, {"SPDXID": "SPDXRef-aarch64-grype", "name": "grype", "versionInfo": "0.119.0-0.2.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "grype-0.119.0-0.2.hum1.aarch64.rpm", "licenseDeclared": "0BSD AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND CC0-1.0 AND ISC AND LicenseRef-Fedora-Public-Domain AND MIT AND MPL-2.0 AND Unlicense AND (Apache-2.0 OR GPL-2.0-or-later)", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/grype@0.119.0-0.2.hum1?arch=aarch64"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "9c7b909665adeaaa7eafa2463bf36148f002383ca0018f50cf8ebd1fd63e59bb"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: b'\\xd1*\\xa3\\x8d\\xd4\\xb1\\x98\\xc1g\\x05aZ\\xa4!j\\xf6'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sha256header: 9aaea718ccdf83b57a7678bf4737074437646146afc38b6d0911ebe3630fe676"}]}, {"SPDXID": "SPDXRef-s390x-grype", "name": "grype", "versionInfo": "0.119.0-0.2.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "grype-0.119.0-0.2.hum1.s390x.rpm", "licenseDeclared": "0BSD AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND CC0-1.0 AND ISC AND LicenseRef-Fedora-Public-Domain AND MIT AND MPL-2.0 AND Unlicense AND (Apache-2.0 OR GPL-2.0-or-later)", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/grype@0.119.0-0.2.hum1?arch=s390x"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "2ff4d13694e5157439242ab89569f922e1b39ad7f6fb0e62898adc4a8e9203c6"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: b'\\x0c\\x03\\xe6M\\xea\\x89\\xa2(\\x80\\xa1\\x18S\\xb0\\x8d\\xd6\\x0b'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sha256header: 61986b3dfe419e595ed419416a27be20c59e631a181c348aeaec29c7acbb78c8"}]}, {"SPDXID": "SPDXRef-x86-64-grype", "name": "grype", "versionInfo": "0.119.0-0.2.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "grype-0.119.0-0.2.hum1.x86_64.rpm", "licenseDeclared": "0BSD AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND CC0-1.0 AND ISC AND LicenseRef-Fedora-Public-Domain AND MIT AND MPL-2.0 AND Unlicense AND (Apache-2.0 OR GPL-2.0-or-later)", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/grype@0.119.0-0.2.hum1?arch=x86_64"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "6e49237b01aa40c18a06e795109d41880f3fe4647b926f40e97e8b3d9dc9ec2d"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: b'\\xc2\\x8b\\xea\\xb9K\\xb5\\xd5TJ\\xd6\\xa9\\xf9|\\x1b\\xee\\xc4'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sha256header: adf24b155d9b7ef465b8caed95b7303510600faa2c7e8a06e87893916c42edaa"}]}, {"SPDXID": "SPDXRef-aarch64-grype-debuginfo", "name": "grype-debuginfo", "versionInfo": "0.119.0-0.2.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "grype-debuginfo-0.119.0-0.2.hum1.aarch64.rpm", "licenseDeclared": "0BSD AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND CC0-1.0 AND ISC AND LicenseRef-Fedora-Public-Domain AND MIT AND MPL-2.0 AND Unlicense AND (Apache-2.0 OR GPL-2.0-or-later)", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/grype-debuginfo@0.119.0-0.2.hum1?arch=aarch64"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "38d0d6c651637e7c76c6e2a43e7bceb6c4bfa56a2ed5eb50aeed8f12cf14a1d3"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: b'H\\x81\\x9c\\x8d\\x0b0\\xb8\\xce\\xb9~\\x88hs\\xbf\\x9e\\x0c'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sha256header: 46c232925050de09ce4782c6dfc4ef772a7df081689d067eab31a50355b815df"}]}, {"SPDXID": "SPDXRef-s390x-grype-debuginfo", "name": "grype-debuginfo", "versionInfo": "0.119.0-0.2.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "grype-debuginfo-0.119.0-0.2.hum1.s390x.rpm", "licenseDeclared": "0BSD AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND CC0-1.0 AND ISC AND LicenseRef-Fedora-Public-Domain AND MIT AND MPL-2.0 AND Unlicense AND (Apache-2.0 OR GPL-2.0-or-later)", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/grype-debuginfo@0.119.0-0.2.hum1?arch=s390x"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "9c46d88fcd22e60d8b324d4875474f2c8e4dd6618a8093ba81c0c71997078236"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: b'\\x84M\\x03\\xde\\xbcS{\\x15A\\xb5D5\\xaeUS\\x9c'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sha256header: f6376b91bbacb1abcc7edf972e2c63cb5149b25a31a008c6406e2f91417bc60a"}]}, {"SPDXID": "SPDXRef-x86-64-grype-debuginfo", "name": "grype-debuginfo", "versionInfo": "0.119.0-0.2.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "grype-debuginfo-0.119.0-0.2.hum1.x86_64.rpm", "licenseDeclared": "0BSD AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND CC0-1.0 AND ISC AND LicenseRef-Fedora-Public-Domain AND MIT AND MPL-2.0 AND Unlicense AND (Apache-2.0 OR GPL-2.0-or-later)", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/grype-debuginfo@0.119.0-0.2.hum1?arch=x86_64"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "19713ec230ece266d030358c06d39a25affec734d4dc0f86d657e68341073106"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: b'\\xd2t\\xce\\x97\\x80A;\\xa3\\xfd^\\x01!\\xb1\\x0c\\xf7\\x1c'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sha256header: 2f959de2df5f91bbe59e25edf6e8a969f264589eecc6afd09647d273faefc1ab"}]}, {"SPDXID": "SPDXRef-aarch64-grype-debugsource", "name": "grype-debugsource", "versionInfo": "0.119.0-0.2.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "grype-debugsource-0.119.0-0.2.hum1.aarch64.rpm", "licenseDeclared": "0BSD AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND CC0-1.0 AND ISC AND LicenseRef-Fedora-Public-Domain AND MIT AND MPL-2.0 AND Unlicense AND (Apache-2.0 OR GPL-2.0-or-later)", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/grype-debugsource@0.119.0-0.2.hum1?arch=aarch64"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "970b73a374fdb3f8771db2a7cff297cf9f0f66b16e24d82e190ce4cce58b1e9b"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: b'Jb\\xcf\\xf7K\\xb8\\xddZ\\x88\\xf7Rsk\\xba\\x89{'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sha256header: b8ad8ee204c0ed496db42d583d043375047f28cfabe4b2cd93da9014ccf9e41e"}]}, {"SPDXID": "SPDXRef-s390x-grype-debugsource", "name": "grype-debugsource", "versionInfo": "0.119.0-0.2.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "grype-debugsource-0.119.0-0.2.hum1.s390x.rpm", "licenseDeclared": "0BSD AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND CC0-1.0 AND ISC AND LicenseRef-Fedora-Public-Domain AND MIT AND MPL-2.0 AND Unlicense AND (Apache-2.0 OR GPL-2.0-or-later)", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/grype-debugsource@0.119.0-0.2.hum1?arch=s390x"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "bd5758133b0b7aa39e99ff123d685407e766bfc89e95551d4adeab3ec121a24d"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: b'6[\\xd3\\x8d\\x8fH\\x0br=>Hjg\\xd6]\\xc9'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sha256header: 79e6ec15d89fd0885e6416c222e52235150426809adcf161258908829991c1c9"}]}, {"SPDXID": "SPDXRef-x86-64-grype-debugsource", "name": "grype-debugsource", "versionInfo": "0.119.0-0.2.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "grype-debugsource-0.119.0-0.2.hum1.x86_64.rpm", "licenseDeclared": "0BSD AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND CC0-1.0 AND ISC AND LicenseRef-Fedora-Public-Domain AND MIT AND MPL-2.0 AND Unlicense AND (Apache-2.0 OR GPL-2.0-or-later)", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/grype-debugsource@0.119.0-0.2.hum1?arch=x86_64"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "916ac4d85b3fcf27380f2e9b57462e99d3c7547fc52cd73e49d62ce2ddb2c0dc"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: b'f\\xf7\\xa7;Dy|\\xd3^\\x02\\xfb?v\\x915\\xa3'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sha256header: 24891d54243824546369cbed0566e1931c20d2e800cff66bb4ac38e2619f0ac7"}]}, {"SPDXID": "SPDXRef-Source0", "name": "grype", "versionInfo": "0.119.0", "packageFileName": "grype-0.119.0.tar.gz", "downloadLocation": "https://src.fedoraproject.org/repo/pkgs/rpms/grype/grype-0.119.0.tar.gz/sha512/a6eb9fb38c7e01f0e1c687078b558860f5342bac94d7bc0916fbe4c884d8f807a9c511a3b5e9f021daef6921febac979cdf46164ee0d7bc9bab4d5f18aef0dd0/grype-0.119.0.tar.gz", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "4d6232a4f657b80aefe083283e0687d5e5237597184a7904abb885a46eaa0d74"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/grype@0.119.0?download_url=https://src.fedoraproject.org/repo/pkgs/rpms/grype/grype-0.119.0.tar.gz/sha512/a6eb9fb38c7e01f0e1c687078b558860f5342bac94d7bc0916fbe4c884d8f807a9c511a3b5e9f021daef6921febac979cdf46164ee0d7bc9bab4d5f18aef0dd0/grype-0.119.0.tar.gz&checksum=sha512:a6eb9fb38c7e01f0e1c687078b558860f5342bac94d7bc0916fbe4c884d8f807a9c511a3b5e9f021daef6921febac979cdf46164ee0d7bc9bab4d5f18aef0dd0"}]}, {"SPDXID": "SPDXRef-Source0-origin", "name": "grype", "versionInfo": "0.119.0", "downloadLocation": "https://github.com/anchore/grype/archive/v0.119.0/grype-0.119.0.tar.gz", "packageFileName": "grype-0.119.0.tar.gz", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "4d6232a4f657b80aefe083283e0687d5e5237597184a7904abb885a46eaa0d74"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/grype@0.119.0?download_url=https://github.com/anchore/grype/archive/v0.119.0/grype-0.119.0.tar.gz&checksum=sha256:4d6232a4f657b80aefe083283e0687d5e5237597184a7904abb885a46eaa0d74"}]}, {"SPDXID": "SPDXRef-Source1", "name": "grype-0.119.0", "versionInfo": "vendor", "packageFileName": "grype-0.119.0-vendor.tar.bz2", "downloadLocation": "https://src.fedoraproject.org/repo/pkgs/rpms/grype/grype-0.119.0-vendor.tar.bz2/sha512/edfec03a453eb6daa43ec5818dbf05414e6205000e6adfb589400a9433036ef2699eeb1c1862fa4c385ba927fa50a95aa94e5667aa89ed8ed2e921859b474147/grype-0.119.0-vendor.tar.bz2", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "4db2cee76f384fde91232884a63dd05a85dd0f90839f38367c4fc99116f726d8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/grype-0.119.0@vendor?download_url=https://src.fedoraproject.org/repo/pkgs/rpms/grype/grype-0.119.0-vendor.tar.bz2/sha512/edfec03a453eb6daa43ec5818dbf05414e6205000e6adfb589400a9433036ef2699eeb1c1862fa4c385ba927fa50a95aa94e5667aa89ed8ed2e921859b474147/grype-0.119.0-vendor.tar.bz2&checksum=sha512:edfec03a453eb6daa43ec5818dbf05414e6205000e6adfb589400a9433036ef2699eeb1c1862fa4c385ba927fa50a95aa94e5667aa89ed8ed2e921859b474147"}]}, {"SPDXID": "SPDXRef-Source2", "name": "go-vendor", "versionInfo": "tools.toml", "packageFileName": "go-vendor-tools.toml", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "5a4a6fc63246342228a4adfb064e1cc000ec7ec2eb935125e43674151c676dad"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/go-vendor@tools.toml"}]}, {"SPDXID": "SPDXRef-Buildroot-grype-aarch64", "name": "grype-buildroot-aarch64", "versionInfo": "da52d037", "downloadLocation": "NOASSERTION", "filesAnalyzed": false}, {"SPDXID": "SPDXRef-Buildroot-Package-R-srpm-macros-aarch64", "name": "R-srpm-macros", "versionInfo": "1.3.7-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/R-srpm-macros-1.3.7-3.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: af95299e83e51b62a40fa7a42d357077"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/R-srpm-macros@1.3.7-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-add-determinism-aarch64", "name": "add-determinism", "versionInfo": "0.7.3-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/a/add-determinism-0.7.3-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND MIT AND Unicode-DFS-2016 AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 OR MIT) AND (Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND (MIT OR Zlib OR Apache-2.0) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: f98d78029bd45bc3d649024a45ce17c6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/add-determinism@0.7.3-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-alternatives-aarch64", "name": "alternatives", "versionInfo": "1.33-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/a/alternatives-1.33-6.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: acd4c0c14bfe18cb245d0a16f0ddaa5a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/alternatives@1.33-6.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-annobin-docs-aarch64", "name": "annobin-docs", "versionInfo": "13.32-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/a/annobin-docs-13.32-1.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND GFDL-1.3-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 18d60a72e7a0be13693c92c6e0d885c9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/annobin-docs@13.32-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-annobin-plugin-gcc-aarch64", "name": "annobin-plugin-gcc", "versionInfo": "13.32-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/a/annobin-plugin-gcc-13.32-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND GFDL-1.3-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: d31e83b90c107057a1121d31ba56720d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/annobin-plugin-gcc@13.32-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ansible-srpm-macros-aarch64", "name": "ansible-srpm-macros", "versionInfo": "1-22.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/a/ansible-srpm-macros-1-22.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 6343ff368e5236625d015dbc91e70769"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ansible-srpm-macros@1-22.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-askalono-cli-aarch64", "name": "askalono-cli", "versionInfo": "0.5.0-4.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/aarch64/os/Packages/a/askalono-cli-0.5.0-4.fc44.aarch64.rpm", "licenseDeclared": "Apache-2.0 AND CC0-1.0 AND MIT AND Unicode-DFS-2016 AND (Apache-2.0 OR BSL-1.0) AND (Apache-2.0 OR MIT) AND (MIT OR Apache-2.0 OR Zlib) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: eae8d6430b2e5c31170f3b2d7f1f51bb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/askalono-cli@0.5.0-4.fc44?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-audit-libs-aarch64", "name": "audit-libs", "versionInfo": "4.2.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/a/audit-libs-4.2.1-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 6fac467d347d162d8ce3b35b75206dc5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/audit-libs@4.2.1-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bash-aarch64", "name": "bash", "versionInfo": "5.3.20-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/b/bash-5.3.20-1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 30a04b74b74cb05b208221994a6fae69"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bash@5.3.20-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-binutils-aarch64", "name": "binutils", "versionInfo": "2.46.1-1.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/b/binutils-2.46.1-1.3.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-3.0-or-later WITH Bison-exception-2.2) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND BSD-3-Clause AND GFDL-1.3-or-later AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 759d77c418b9d81a7648d2791e5c42c7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/binutils@2.46.1-1.3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-build-reproducibility-srpm-macros-aarch64", "name": "build-reproducibility-srpm-macros", "versionInfo": "0.7.3-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/b/build-reproducibility-srpm-macros-0.7.3-3.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 4dea8bdbe97b4534f60d8a6d0b9c793c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/build-reproducibility-srpm-macros@0.7.3-3.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bzip2-libs-aarch64", "name": "bzip2-libs", "versionInfo": "1.0.8-24.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/b/bzip2-libs-1.0.8-24.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-4-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 7fe1a1592b12936460dc276a532df8e7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bzip2-libs@1.0.8-24.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bzip2-aarch64", "name": "bzip2", "versionInfo": "1.0.8-24.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/b/bzip2-1.0.8-24.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-4-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 83f0af4d4c241cc82118a298f501cb03"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bzip2@1.0.8-24.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ca-certificates-aarch64", "name": "ca-certificates", "versionInfo": "2026.2.90_v9.0.317-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/ca-certificates-2026.2.90_v9.0.317-1.1.hum1.noarch.rpm", "licenseDeclared": "MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: a195cd97c3daf258791a89c2b5af39d2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ca-certificates@2026.2.90_v9.0.317-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cmake-srpm-macros-aarch64", "name": "cmake-srpm-macros", "versionInfo": "4.3.0-5.6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/cmake-srpm-macros-4.3.0-5.6.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND MIT-open-group AND Zlib AND Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: e2f14e03350d92477884a522df888c53"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cmake-srpm-macros@4.3.0-5.6.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-coreutils-common-aarch64", "name": "coreutils-common", "versionInfo": "9.12-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/coreutils-common-9.12-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-no-invariants-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 00432e73aa7e8f8d82bb41466441d4ed"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/coreutils-common@9.12-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-coreutils-aarch64", "name": "coreutils", "versionInfo": "9.12-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/coreutils-9.12-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-no-invariants-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: b7d057d25d185ea30f52ed55c681988a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/coreutils@9.12-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cpio-aarch64", "name": "cpio", "versionInfo": "2.15-10.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/cpio-2.15-10.2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: f77875899a01094a286314746b22d940"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cpio@2.15-10.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cpp-aarch64", "name": "cpp", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/cpp-16.2.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: a611ee4e61820fcf829400383ee9409c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cpp@16.2.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-crypto-policies-config-default-aarch64", "name": "crypto-policies-config-default", "versionInfo": "20260812-1.git359ab16.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/crypto-policies-config-default-20260812-1.git359ab16.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 1e6fce169a2973e4f665428cb52ae9ad"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/crypto-policies-config-default@20260812-1.git359ab16.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-crypto-policies-aarch64", "name": "crypto-policies", "versionInfo": "20260812-1.git359ab16.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/crypto-policies-20260812-1.git359ab16.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 9756d9b800cfeafa3f39e494328a620e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/crypto-policies@20260812-1.git359ab16.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-curl-aarch64", "name": "curl", "versionInfo": "8.22.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/curl-8.22.0-1.1.hum1.aarch64.rpm", "licenseDeclared": "curl", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 7b537dee74129daa42cb345356cb49ea"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/curl@8.22.0-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cyrus-sasl-lib-aarch64", "name": "cyrus-sasl-lib", "versionInfo": "2.1.28-37.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/cyrus-sasl-lib-2.1.28-37.2.hum1.aarch64.rpm", "licenseDeclared": "BSD-Attribution-HPND-disclaimer", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 3008fe0f694661a96ab85a997c2588aa"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cyrus-sasl-lib@2.1.28-37.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-debugedit-aarch64", "name": "debugedit", "versionInfo": "5.3-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/d/debugedit-5.3-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 47dcf14fc5162a4b0c17db4dfcfc193e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/debugedit@5.3-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-diffutils-aarch64", "name": "diffutils", "versionInfo": "3.12-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/d/diffutils-3.12-6.2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: e35b767ef8917507a2fe4e6a910ca89f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/diffutils@3.12-6.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-dwz-aarch64", "name": "dwz", "versionInfo": "0.17-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/d/dwz-0.17-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND GPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 3c0f22ca90ca43fc789f6fe8cb2ad2bc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/dwz@0.17-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ed-aarch64", "name": "ed", "versionInfo": "1.22.6-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/ed-1.22.6-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-only AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: d9d972206c5fb68a5eb404b6bcef4ced"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ed@1.22.6-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-efi-srpm-macros-aarch64", "name": "efi-srpm-macros", "versionInfo": "6-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/efi-srpm-macros-6-9.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: cba49c2554beb37df9cc6bb744737e2b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/efi-srpm-macros@6-9.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-debuginfod-client-aarch64", "name": "elfutils-debuginfod-client", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/elfutils-debuginfod-client-0.196-1.1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-2.0-or-later OR LGPL-3.0-or-later)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: d8d203fd99c873559a67e6443ff174f2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-debuginfod-client@0.196-1.1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-libelf-aarch64", "name": "elfutils-libelf", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/elfutils-libelf-0.196-1.1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 33f3b0f1b90d80a0dadbd7cc447c364c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-libelf@0.196-1.1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-libs-aarch64", "name": "elfutils-libs", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/elfutils-libs-0.196-1.1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 0595a64126ec97eb4d56b5cd73a38777"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-libs@0.196-1.1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-aarch64", "name": "elfutils", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/elfutils-0.196-1.1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-2.0-or-later OR LGPL-3.0-or-later) AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 0d70f8163d0190e72edab57ffae31ffe"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils@0.196-1.1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-erlang-srpm-macros-aarch64", "name": "erlang-srpm-macros", "versionInfo": "0.3.11-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/erlang-srpm-macros-0.3.11-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 063020bc2b254fec865c06f313930cec"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/erlang-srpm-macros@0.3.11-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-expat-aarch64", "name": "expat", "versionInfo": "2.8.5-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/expat-2.8.5-1.2.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 6ff138c1441fc1b5f133acb582b3e364"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/expat@2.8.5-1.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-file-libs-aarch64", "name": "file-libs", "versionInfo": "5.48-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/file-libs-5.48-3.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause-Darwin AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: a540b886506755c536a09f999daa1c47"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/file-libs@5.48-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-filesystem-srpm-macros-aarch64", "name": "filesystem-srpm-macros", "versionInfo": "3.18-59.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/filesystem-srpm-macros-3.18-59.1.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: cff1a42588f4eb1a758735b668069a67"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/filesystem-srpm-macros@3.18-59.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-filesystem-aarch64", "name": "filesystem", "versionInfo": "3.18-59.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/filesystem-3.18-59.1.hum1.aarch64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 67a1cc536f9cab735cb846baefddb7ea"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/filesystem@3.18-59.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-file-aarch64", "name": "file", "versionInfo": "5.48-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/file-5.48-3.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause-Darwin AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 9f3d10d98787fff380b03a8f3e77102a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/file@5.48-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-findutils-aarch64", "name": "findutils", "versionInfo": "1:4.11.0-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/findutils-4.11.0-2.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: f6ec1178a2de3f3dd2e67aab0bfa51f7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/findutils@4.11.0-2.1.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-fonts-srpm-macros-aarch64", "name": "fonts-srpm-macros", "versionInfo": "1:5.0.0-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/fonts-srpm-macros-5.0.0-4.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 72e451571f24737949a256d091508d0c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/fonts-srpm-macros@5.0.0-4.hum1?arch=noarch&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-forge-srpm-macros-aarch64", "name": "forge-srpm-macros", "versionInfo": "0.4.0-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/forge-srpm-macros-0.4.0-5.hum1.noarch.rpm", "licenseDeclared": "GPL-1.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: bfbed65969ec708556df3750591a377d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/forge-srpm-macros@0.4.0-5.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-fpc-srpm-macros-aarch64", "name": "fpc-srpm-macros", "versionInfo": "1.3-17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/fpc-srpm-macros-1.3-17.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 1f7e4cb902ccc37236f8d34ff8873cf2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/fpc-srpm-macros@1.3-17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gap-srpm-macros-aarch64", "name": "gap-srpm-macros", "versionInfo": "2-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gap-srpm-macros-2-3.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 70e3423696085d13791fefc0be7cdf15"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gap-srpm-macros@2-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gawk-aarch64", "name": "gawk", "versionInfo": "5.4.1-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gawk-5.4.1-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 02ea494697003941445d782d0f94b2d4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gawk@5.4.1-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gcc-plugin-annobin-aarch64", "name": "gcc-plugin-annobin", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gcc-plugin-annobin-16.2.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 856d8e3f146702081b65317a6da18f90"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gcc-plugin-annobin@16.2.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gcc-aarch64", "name": "gcc", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gcc-16.2.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 555fbdebe005a6003d740878539d2db4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gcc@16.2.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gdb-minimal-aarch64", "name": "gdb-minimal", "versionInfo": "17.2-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gdb-minimal-17.2-6.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND BSD-3-Clause AND FSFAP AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain AND GFDL-1.3-or-later AND LGPL-2.0-or-later WITH GCC-exception-2.0 AND GPL-3.0-or-later WITH GCC-exception-3.1 AND GPL-2.0-or-later WITH GNU-compiler-exception AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 8b52c99ad39fb4b6c9bc68140320c43f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gdb-minimal@17.2-6.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gdbm-libs-aarch64", "name": "gdbm-libs", "versionInfo": "1:1.26-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gdbm-libs-1.26-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: f121be53d17f9bbca1ca50a948d12be1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gdbm-libs@1.26-1.1.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ghc-srpm-macros-aarch64", "name": "ghc-srpm-macros", "versionInfo": "1.10-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/ghc-srpm-macros-1.10-2.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: c59363c566e4f370953f5f4b048e594e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ghc-srpm-macros@1.10-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-common-aarch64", "name": "glibc-common", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/glibc-common-2.43-9.2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: f9a198e72a2894ed9ec88a654adf99b1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-common@2.43-9.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-devel-aarch64", "name": "glibc-devel", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/glibc-devel-2.43-9.2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: e42112d33f8547a881c1bb9ffdc1a6e3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-devel@2.43-9.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-gconv-extra-aarch64", "name": "glibc-gconv-extra", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/glibc-gconv-extra-2.43-9.2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: ae1cf12211d528ac9ae11fb34b1bb66b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-gconv-extra@2.43-9.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-minimal-langpack-aarch64", "name": "glibc-minimal-langpack", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/glibc-minimal-langpack-2.43-9.2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 0039d68e01dc9ac5d477a98ecdf2918e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-minimal-langpack@2.43-9.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-aarch64", "name": "glibc", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/glibc-2.43-9.2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: e5a77566fe809a0ac7c2a5a2ec623de6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc@2.43-9.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gmp-aarch64", "name": "gmp", "versionInfo": "1:6.3.0-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gmp-6.3.0-6.1.hum1.aarch64.rpm", "licenseDeclared": "(LGPL-3.0-or-later OR GPL-2.0-or-later OR (LGPL-3.0-or-later AND GPL-2.0-or-later)) AND GFDL-1.3-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 166ae71bf4af463dff3d7c6f5023d699"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gmp@6.3.0-6.1.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnat-srpm-macros-aarch64", "name": "gnat-srpm-macros", "versionInfo": "7-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnat-srpm-macros-7-3.hum1.noarch.rpm", "licenseDeclared": "FSFAP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 66efb6ab04e5e1a84478a688e2f149a3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnat-srpm-macros@7-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnome-srpm-macros-aarch64", "name": "gnome-srpm-macros", "versionInfo": "1.0-1.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/updates/44/Everything/aarch64/Packages/g/gnome-srpm-macros-1.0-1.fc44.noarch.rpm", "licenseDeclared": "Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 2bbaa6afcb861d76b0036e4b5bf9b3be"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnome-srpm-macros@1.0-1.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnulib-l10n-aarch64", "name": "gnulib-l10n", "versionInfo": "20241231-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnulib-l10n-20241231-4.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 5628836ab4d4e824bcadb20d87a01a33"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnulib-l10n@20241231-4.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-dirmngr-aarch64", "name": "gnupg2-dirmngr", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnupg2-dirmngr-2.4.9-18.2.hum1.aarch64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 573b7679ab4b9d60430280a4118102c2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-dirmngr@2.4.9-18.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-gpg-agent-aarch64", "name": "gnupg2-gpg-agent", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnupg2-gpg-agent-2.4.9-18.2.hum1.aarch64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: ade2846c6a8b7bb8e8c3b0c63fb67f7f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-gpg-agent@2.4.9-18.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-gpgconf-aarch64", "name": "gnupg2-gpgconf", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnupg2-gpgconf-2.4.9-18.2.hum1.aarch64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: da48ec10f5d1daccbd975810b0b9c100"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-gpgconf@2.4.9-18.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-keyboxd-aarch64", "name": "gnupg2-keyboxd", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnupg2-keyboxd-2.4.9-18.2.hum1.aarch64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: e12f0d3a0a12adafdb2f9c93d96e60f5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-keyboxd@2.4.9-18.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-verify-aarch64", "name": "gnupg2-verify", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnupg2-verify-2.4.9-18.2.hum1.aarch64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 43419a3185e8322daad33b555b420bb8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-verify@2.4.9-18.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-aarch64", "name": "gnupg2", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnupg2-2.4.9-18.2.hum1.aarch64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: a5c1a31bb640a3b81e5b4c72524d1445"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2@2.4.9-18.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnutls-aarch64", "name": "gnutls", "versionInfo": "3.8.13-5.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnutls-3.8.13-5.2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 191df5a76f2ce6a009e3153d099cbcff"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnutls@3.8.13-5.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-filesystem-aarch64", "name": "go-filesystem", "versionInfo": "3.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/go-filesystem-3.8.0-3.hum1.aarch64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 21c344b50ec791073eecf2f78130e36d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-filesystem@3.8.0-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-rpm-macros-aarch64", "name": "go-rpm-macros", "versionInfo": "3.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/go-rpm-macros-3.8.0-3.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 1cca57be53ff370d84ba6f32712ca1e2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-rpm-macros@3.8.0-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-srpm-macros-aarch64", "name": "go-srpm-macros", "versionInfo": "3.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/go-srpm-macros-3.8.0-3.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 58fd7d8eb056ce7d09e3ba375de1effc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-srpm-macros@3.8.0-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-vendor-tools-aarch64", "name": "go-vendor-tools", "versionInfo": "0.12.0-1.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/updates/44/Everything/aarch64/Packages/g/go-vendor-tools-0.12.0-1.fc44.noarch.rpm", "licenseDeclared": "MIT AND BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 7c4ed6389413dbed713121b1168f24da"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-vendor-tools@0.12.0-1.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-bin-aarch64", "name": "golang1.27-bin", "versionInfo": "1.27.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/golang1.27-bin-1.27.2-1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: ca801334afe32839aee19b91c43532dc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27-bin@1.27.2-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-src-aarch64", "name": "golang1.27-src", "versionInfo": "1.27.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/golang1.27-src-1.27.2-1.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: f40c9e87cab011209fed012b75f85d64"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27-src@1.27.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-aarch64", "name": "golang1.27", "versionInfo": "1.27.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/golang1.27-1.27.2-1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: ee42ca71c1f43b31272dfa52dfa74d7a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27@1.27.2-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golist-aarch64", "name": "golist", "versionInfo": "0.11.0-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/golist-0.11.0-2.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause AND BSD-3-Clause AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: b92a6bbb82038b2e3078acfb1c3f4220"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golist@0.11.0-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gpgverify-aarch64", "name": "gpgverify", "versionInfo": "2.2-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gpgverify-2.2-5.hum1.noarch.rpm", "licenseDeclared": "Boehm-GC", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 9637bdca60814388d4c5b144d923e6d4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gpgverify@2.2-5.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-grep-aarch64", "name": "grep", "versionInfo": "3.12-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/grep-3.12-4.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 3f1164dfa8f8a8505d9e42cd93ae92b5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/grep@3.12-4.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gzip-aarch64", "name": "gzip", "versionInfo": "1.15-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gzip-1.15-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 1ab7c6152e06a467fc96821375eb1ed0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gzip@1.15-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-gpg-keys-aarch64", "name": "hummingbird-gpg-keys", "versionInfo": "20251124-1.17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/h/hummingbird-gpg-keys-20251124-1.17.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 01a73721cc0ecdcb5d9f3929f6777157"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-gpg-keys@20251124-1.17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-release-aarch64", "name": "hummingbird-release", "versionInfo": "20251124-1.17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/h/hummingbird-release-20251124-1.17.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: d1c993eba75002797ea72c3cd1266853"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-release@20251124-1.17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-repos-aarch64", "name": "hummingbird-repos", "versionInfo": "20251124-1.17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/h/hummingbird-repos-20251124-1.17.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 1704eb0434ddab68e1c756070246f576"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-repos@20251124-1.17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ima-evm-utils-libs-aarch64", "name": "ima-evm-utils-libs", "versionInfo": "1.6.2-12.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/i/ima-evm-utils-libs-1.6.2-12.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: a96435ab801796679b678799c4768d2e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ima-evm-utils-libs@1.6.2-12.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-info-aarch64", "name": "info", "versionInfo": "7.2-9.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/aarch64/os/Packages/i/info-7.2-9.fc44.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: ff57ae9e674b526c3d40eebc6a75d7f1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/info@7.2-9.fc44?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-jansson-aarch64", "name": "jansson", "versionInfo": "2.14-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/j/jansson-2.14-5.1.hum1.aarch64.rpm", "licenseDeclared": "MIT AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: bf335621846a7b5ac53ffbc9a26e1326"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/jansson@2.14-5.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-java-srpm-macros-aarch64", "name": "java-srpm-macros", "versionInfo": "1-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/j/java-srpm-macros-1-9.hum1.noarch.rpm", "licenseDeclared": "MIT-0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 367fafb59cbd6a02034ba8bafdafe9c9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/java-srpm-macros@1-9.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-json-c-aarch64", "name": "json-c", "versionInfo": "0.18-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/j/json-c-0.18-9.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 35d1a4b8eecbbf9528f613f719cf4993"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/json-c@0.18-9.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-kernel-headers-aarch64", "name": "kernel-headers", "versionInfo": "7.2.0-61.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/k/kernel-headers-7.2.0-61.1.hum1.aarch64.rpm", "licenseDeclared": "((GPL-2.0-only WITH Linux-syscall-note) OR BSD-2-Clause) AND ((GPL-2.0-only WITH Linux-syscall-note) OR BSD-3-Clause) AND ((GPL-2.0-only WITH Linux-syscall-note) OR CDDL-1.0) AND ((GPL-2.0-only WITH Linux-syscall-note) OR Linux-OpenIB) AND ((GPL-2.0-only WITH Linux-syscall-note) OR MIT) AND ((GPL-2.0-or-later WITH Linux-syscall-note) OR BSD-3-Clause) AND ((GPL-2.0-or-later WITH Linux-syscall-note) OR MIT) AND BSD-3-Clause AND (GPL-1.0-or-later WITH Linux-syscall-note) AND GPL-2.0-only AND (GPL-2.0-only WITH Linux-syscall-note) AND (GPL-2.0-or-later WITH Linux-syscall-note) AND (LGPL-2.0-or-later WITH Linux-syscall-note) AND (LGPL-2.1-only WITH Linux-syscall-note) AND (LGPL-2.1-or-later WITH Linux-syscall-note) AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: f889dccce5f81f4149c72806e43c1190"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/kernel-headers@7.2.0-61.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-kernel-srpm-macros-aarch64", "name": "kernel-srpm-macros", "versionInfo": "1.0-30.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/k/kernel-srpm-macros-1.0-30.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: d6fe851b8eed59b0b3ed90411974a3f1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/kernel-srpm-macros@1.0-30.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-keyutils-libs-aarch64", "name": "keyutils-libs", "versionInfo": "1.6.3-8.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/k/keyutils-libs-1.6.3-8.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: d3b7e7b1223be819aef95669d2c4fe0e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/keyutils-libs@1.6.3-8.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-krb5-libs-aarch64", "name": "krb5-libs", "versionInfo": "1.22.2-10.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/k/krb5-libs-1.22.2-10.3.hum1.aarch64.rpm", "licenseDeclared": "Brian-Gladman-2-Clause AND BSD-2-Clause AND (BSD-2-Clause OR GPL-2.0-or-later) AND BSD-2-Clause-first-lines AND BSD-3-Clause AND BSD-4-Clause AND CMU-Mach-nodoc AND FSFULLRWD AND HPND AND HPND-export2-US AND HPND-export-US AND HPND-export-US-acknowledgement AND HPND-export-US-modify AND ISC AND MIT AND MIT-CMU AND OLDAP-2.8 AND OpenVision", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 1ca5cfa7ebc428c140efce4d74804015"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/krb5-libs@1.22.2-10.3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libacl-aarch64", "name": "libacl", "versionInfo": "2.4.0-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libacl-2.4.0-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 9a7c25684f484750003d22bfc95ac6e6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libacl@2.4.0-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libarchive-aarch64", "name": "libarchive", "versionInfo": "3.8.9-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libarchive-3.8.9-2.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause AND FSFULLR AND GPL-2.0-or-later WITH Libtool-exception AND BSD-3-Clause AND FSFUL", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: c0ad6886a62c6973197b2228b23ec20f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libarchive@3.8.9-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libasan-aarch64", "name": "libasan", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libasan-16.2.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 25182d3ba6ea7a6d2272732b63410bb0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libasan@16.2.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libassuan-aarch64", "name": "libassuan", "versionInfo": "2.5.7-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libassuan-2.5.7-6.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: e4bd09b483f2710e919e8b121b8def5b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libassuan@2.5.7-6.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libatomic-aarch64", "name": "libatomic", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libatomic-16.2.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: b96959aff3608e7749fb10e2d07550a2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libatomic@16.2.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libattr-aarch64", "name": "libattr", "versionInfo": "2.6.0-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libattr-2.6.0-9.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: d1a9e2272f66b2470ddf103dccdbaa58"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libattr@2.6.0-9.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libblkid-aarch64", "name": "libblkid", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libblkid-2.42.4-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 5c7b723d8212d39d56c0d0acb9080c1b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libblkid@2.42.4-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libbrotli-aarch64", "name": "libbrotli", "versionInfo": "1.2.0-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libbrotli-1.2.0-6.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 869ed8881342af797e348cfbd48977db"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libbrotli@1.2.0-6.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcap-ng-aarch64", "name": "libcap-ng", "versionInfo": "0.9.6-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libcap-ng-0.9.6-1.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 9d383300e9cc456fd95f72ae9b417c32"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcap-ng@0.9.6-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcap-aarch64", "name": "libcap", "versionInfo": "2.78-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libcap-2.78-2.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: e99edee512a85f0da32dac44637395a0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcap@2.78-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcbor-aarch64", "name": "libcbor", "versionInfo": "0.14.0-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libcbor-0.14.0-3.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: fa0be1d01e63778fbf1a7b130aecea58"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcbor@0.14.0-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcom-err-aarch64", "name": "libcom_err", "versionInfo": "1.47.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libcom_err-1.47.4-2.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: de7ad9514f9df324f82aa913badb893a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcom_err@1.47.4-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcurl-aarch64", "name": "libcurl", "versionInfo": "8.22.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libcurl-8.22.0-1.1.hum1.aarch64.rpm", "licenseDeclared": "curl", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: e29d913a076a037c83164d4cc34c9448"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcurl@8.22.0-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libeconf-aarch64", "name": "libeconf", "versionInfo": "0.7.9-4.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libeconf-0.7.9-4.2.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 415ebd06ff218a7848731dd8a12df71d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libeconf@0.7.9-4.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libevent-aarch64", "name": "libevent", "versionInfo": "2.1.13-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libevent-2.1.13-1.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND ISC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: e8b87c1794d95583f6cc214eb663e885"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libevent@2.1.13-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfdisk-aarch64", "name": "libfdisk", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libfdisk-2.42.4-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 5fd6813b6601248c9ee9a9b1756e4aa1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfdisk@2.42.4-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libffi-aarch64", "name": "libffi", "versionInfo": "3.8.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libffi-3.8.0-1.1.hum1.aarch64.rpm", "licenseDeclared": "MIT AND CC-PDDC AND (GPL-3.0-or-later WITH Texinfo-exception)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: dc83882a4ffb09b4e5578776aa34fafa"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libffi@3.8.0-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfido2-aarch64", "name": "libfido2", "versionInfo": "1.17.0-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libfido2-1.17.0-6.2.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 40ab484ed83832f7ef24688549227664"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfido2@1.17.0-6.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfsverity-aarch64", "name": "libfsverity", "versionInfo": "1.7-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libfsverity-1.7-4.1.hum1.aarch64.rpm", "licenseDeclared": "NOASSERTION", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 08e4f68c1432f65fac30bcd58c12091e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfsverity@1.7-4.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgcc-aarch64", "name": "libgcc", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libgcc-16.2.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 67a485baa0d3fb4c0e71f3ba1df5f902"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgcc@16.2.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgcrypt-aarch64", "name": "libgcrypt", "versionInfo": "1.12.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libgcrypt-1.12.4-1.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND (BSD-3-Clause OR GPL-2.0-only) AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later AND MIT-Modern-Variant", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: c5c2ac6cdd2c137b49767a001717c89d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgcrypt@1.12.4-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgomp-aarch64", "name": "libgomp", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libgomp-16.2.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 014e8fb82e2268ed7b74f11ce5a8b4eb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgomp@16.2.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgpg-error-aarch64", "name": "libgpg-error", "versionInfo": "1.61-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libgpg-error-1.61-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND (BSD-3-Clause OR LGPL-2.1-or-later) AND FSFULLR AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 204ebeaf74957a27cc2b160a94f0c79e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgpg-error@1.61-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libidn2-aarch64", "name": "libidn2", "versionInfo": "2.3.8-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libidn2-2.3.8-4.1.hum1.aarch64.rpm", "licenseDeclared": "(GPL-2.0-or-later OR LGPL-3.0-or-later) AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 376a3c90f89b82a907277d1af37c65cd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libidn2@2.3.8-4.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libksba-aarch64", "name": "libksba", "versionInfo": "1.8.1-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libksba-1.8.1-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND (LGPL-3.0-or-later OR GPL-2.0-or-later)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: d6a0dcf217b4639e44ee3774153fe5aa"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libksba@1.8.1-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-liblastlog2-aarch64", "name": "liblastlog2", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/liblastlog2-2.42.4-2.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: a7d655451f4570e65aa8f53042f5ecbb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/liblastlog2@2.42.4-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libmount-aarch64", "name": "libmount", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libmount-2.42.4-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 28a418811acfed0034210aa6794e4742"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libmount@2.42.4-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libmpc-aarch64", "name": "libmpc", "versionInfo": "1.4.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libmpc-1.4.1-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-3.0-or-later AND FSFAP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 0153c23cb56f963b856d77e6606b46a4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libmpc@1.4.1-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnghttp2-aarch64", "name": "libnghttp2", "versionInfo": "1.69.0-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libnghttp2-1.69.0-6.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: b2b0fab8908bbedc877ac938800f0385"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnghttp2@1.69.0-6.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnghttp3-aarch64", "name": "libnghttp3", "versionInfo": "1.18.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libnghttp3-1.18.0-1.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 731f3357d94b41124af945cecea7639e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnghttp3@1.18.0-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpfm-aarch64", "name": "libpfm", "versionInfo": "4.13.0-20.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/updates/44/Everything/aarch64/Packages/l/libpfm-4.13.0-20.fc44.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: f67c59ebdcc2d13a01308d6b1d6e536c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpfm@4.13.0-20.fc44?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpkgconf-aarch64", "name": "libpkgconf", "versionInfo": "2.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libpkgconf-2.5.1-2.1.hum1.aarch64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 6a472459f25a886e09b755fd94506315"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpkgconf@2.5.1-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpsl-aarch64", "name": "libpsl", "versionInfo": "0.23.3-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libpsl-0.23.3-1.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: cafec3bb2c0a8c9008983d6ae8495d1e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpsl@0.23.3-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libselinux-utils-aarch64", "name": "libselinux-utils", "versionInfo": "3.11-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libselinux-utils-3.11-5.1.hum1.aarch64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: a086b73677bd9517a3b039ac5a432040"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libselinux-utils@3.11-5.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libselinux-aarch64", "name": "libselinux", "versionInfo": "3.11-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libselinux-3.11-5.1.hum1.aarch64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 25520cb28213914e5586621a3e2d314b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libselinux@3.11-5.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsemanage-aarch64", "name": "libsemanage", "versionInfo": "3.11-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libsemanage-3.11-4.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 09bc146f89eb39e1d401f83431ccccea"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsemanage@3.11-4.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsepol-aarch64", "name": "libsepol", "versionInfo": "3.11-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libsepol-3.11-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 2cc6e52cce99fa8840bd0465e75a025c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsepol@3.11-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsmartcols-aarch64", "name": "libsmartcols", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libsmartcols-2.42.4-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 2d04c60be141e0254792ddf85c0e0cc0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsmartcols@2.42.4-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libssh-config-aarch64", "name": "libssh-config", "versionInfo": "0.12.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libssh-config-0.12.2-1.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: f26ba5abb68d2fea08f751a8569faa35"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libssh-config@0.12.2-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libssh-aarch64", "name": "libssh", "versionInfo": "0.12.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libssh-0.12.2-1.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 08f9742c96d29f39defcebf4fd74b197"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libssh@0.12.2-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libstdc++-aarch64", "name": "libstdc++", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libstdc++-16.2.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: e725710c3409d1d4619730547f7449f8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libstdc++@16.2.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtasn1-aarch64", "name": "libtasn1", "versionInfo": "4.21.0-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libtasn1-4.21.0-2.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 14c7c1c97721bac561b7d5f8b5c0c39b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtasn1@4.21.0-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtool-ltdl-aarch64", "name": "libtool-ltdl", "versionInfo": "2.6.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libtool-ltdl-2.6.2-1.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.0-or-later WITH Libtool-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 9809b30f9c49849338a2498623dfb852"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtool-ltdl@2.6.2-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libubsan-aarch64", "name": "libubsan", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libubsan-16.2.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 5a41a411d481c8f52c4f75276408738e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libubsan@16.2.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libunistring-aarch64", "name": "libunistring", "versionInfo": "1.1-12.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libunistring-1.1-12.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: bf45761accca21784ca1db3f147e5757"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libunistring@1.1-12.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libusb1-aarch64", "name": "libusb1", "versionInfo": "1.0.30-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libusb1-1.0.30-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 85c533d18faa83223f25c27c52a93f10"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libusb1@1.0.30-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libuuid-aarch64", "name": "libuuid", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libuuid-2.42.4-2.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: aefcbbc685252be8d35e820024dcce0b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libuuid@2.42.4-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libverto-aarch64", "name": "libverto", "versionInfo": "0.3.2-13.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libverto-0.3.2-13.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 70ecf5a6823c71930b20e277c56238db"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libverto@0.3.2-13.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxcrypt-devel-aarch64", "name": "libxcrypt-devel", "versionInfo": "4.5.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libxcrypt-devel-4.5.2-4.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND BSD-3-Clause AND BSD-2-Clause AND BSD-2-Clause-FreeBSD AND 0BSD AND CC0-1.0 AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 59b03056a000c26fb4c849049d75b60f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxcrypt-devel@4.5.2-4.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxcrypt-aarch64", "name": "libxcrypt", "versionInfo": "4.5.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libxcrypt-4.5.2-4.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND BSD-3-Clause AND BSD-2-Clause AND BSD-2-Clause-FreeBSD AND 0BSD AND CC0-1.0 AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: db80a9643632ced837bc9a2cbaec27f3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxcrypt@4.5.2-4.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxml2-16-aarch64", "name": "libxml2-16", "versionInfo": "2.15.4-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libxml2-16-2.15.4-1.2.hum1.aarch64.rpm", "licenseDeclared": "MIT AND ISC-Veillard AND W3C", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 42dfa79f0ef5d6069cddea1de7c03068"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxml2-16@2.15.4-1.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libzstd-aarch64", "name": "libzstd", "versionInfo": "1.5.7-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libzstd-1.5.7-6.2.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: b8aaeb5f120147f9830dc5f9d40bef28"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libzstd@1.5.7-6.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-linkdupes-aarch64", "name": "linkdupes", "versionInfo": "0.7.3-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/linkdupes-0.7.3-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND MIT AND Unicode-DFS-2016 AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND (MIT OR Zlib OR Apache-2.0) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 0f212d529c254829bbfdc3493bc10f32"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/linkdupes@0.7.3-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lua-libs-aarch64", "name": "lua-libs", "versionInfo": "5.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/lua-libs-5.5.1-2.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 29a8431add425bb28338079ae0399718"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lua-libs@5.5.1-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lua-srpm-macros-aarch64", "name": "lua-srpm-macros", "versionInfo": "1-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/lua-srpm-macros-1-18.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 68293f00751e1bc423b0bb2ac4e21221"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lua-srpm-macros@1-18.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lz4-libs-aarch64", "name": "lz4-libs", "versionInfo": "1.10.0-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/lz4-libs-1.10.0-5.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: ccee7d664e4a84d6aa511e3a26f93f9f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lz4-libs@1.10.0-5.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-make-aarch64", "name": "make", "versionInfo": "1:4.4.1-13.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/m/make-4.4.1-13.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND GFDL-1.3-or-later AND FSFULLR", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 5da3e1b32d2cebd830a2448f0f940ff3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/make@4.4.1-13.1.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-meson-srpm-macros-aarch64", "name": "meson-srpm-macros", "versionInfo": "1.12.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/m/meson-srpm-macros-1.12.1-2.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 7617c98560a327b943961c400248f04b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/meson-srpm-macros@1.12.1-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-mpdecimal-aarch64", "name": "mpdecimal", "versionInfo": "4.0.1-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/m/mpdecimal-4.0.1-4.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 36ba815791916cccfd7c0d0c17792adc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/mpdecimal@4.0.1-4.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-mpfr-aarch64", "name": "mpfr", "versionInfo": "4.2.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/m/mpfr-4.2.2-4.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 0702e996cddee9453e51791dfdeb33df"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/mpfr@4.2.2-4.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ncurses-base-aarch64", "name": "ncurses-base", "versionInfo": "6.6-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/n/ncurses-base-6.6-3.1.hum1.noarch.rpm", "licenseDeclared": "MIT-open-group", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: a90d36a4f9603dffe4896cbc1c4c42c0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ncurses-base@6.6-3.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ncurses-libs-aarch64", "name": "ncurses-libs", "versionInfo": "6.6-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/n/ncurses-libs-6.6-3.1.hum1.aarch64.rpm", "licenseDeclared": "MIT-open-group", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: fa3c5788474bd14c1980e9f334fd1b6c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ncurses-libs@6.6-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-nettle-aarch64", "name": "nettle", "versionInfo": "4.0-5.5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/n/nettle-4.0-5.5.hum1.aarch64.rpm", "licenseDeclared": "LGPL-3.0-or-later OR GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 8485733d8b83283c746c07ccb4cd3fce"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/nettle@4.0-5.5.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ngtcp2-crypto-ossl-aarch64", "name": "ngtcp2-crypto-ossl", "versionInfo": "1.22.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/n/ngtcp2-crypto-ossl-1.22.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 7a6ca0d297c88673e5f88c76f501f7fc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ngtcp2-crypto-ossl@1.22.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ngtcp2-aarch64", "name": "ngtcp2", "versionInfo": "1.22.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/n/ngtcp2-1.22.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: e6d8cfb25c0e2eb0ec02bfa93b7c67fe"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ngtcp2@1.22.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-npth-aarch64", "name": "npth", "versionInfo": "1.8-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/n/npth-1.8-5.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 9df021e664b3a2a9bd92cfbb1b829fcf"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/npth@1.8-5.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ocaml-srpm-macros-aarch64", "name": "ocaml-srpm-macros", "versionInfo": "11-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/o/ocaml-srpm-macros-11-4.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 6d563b597c552c5ce842bdd83b6d8dd1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ocaml-srpm-macros@11-4.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openblas-srpm-macros-aarch64", "name": "openblas-srpm-macros", "versionInfo": "2-23.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/o/openblas-srpm-macros-2-23.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: bf3a7ebbd05d3c09e9712e957b99d3b5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openblas-srpm-macros@2-23.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openldap-aarch64", "name": "openldap", "versionInfo": "2.6.15-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/o/openldap-2.6.15-1.1.hum1.aarch64.rpm", "licenseDeclared": "OLDAP-2.8", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 7a0a38a30429c24b8ee796ace3fa72b6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openldap@2.6.15-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssl-fips-provider-upstream-aarch64", "name": "openssl-fips-provider-upstream", "versionInfo": "1:3.5.9-0.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/o/openssl-fips-provider-upstream-3.5.9-0.3.hum1.aarch64.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 7d58b7603194e834c375f9794fc20ec3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssl-fips-provider-upstream@3.5.9-0.3.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssl-libs-aarch64", "name": "openssl-libs", "versionInfo": "1:3.5.9-0.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/o/openssl-libs-3.5.9-0.3.hum1.aarch64.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 0bf0c50423ec91bf21a25ad8a5ad2344"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssl-libs@3.5.9-0.3.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-p11-kit-trust-aarch64", "name": "p11-kit-trust", "versionInfo": "0.26.5-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/p11-kit-trust-0.26.5-1.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 4cbcde19716630f9edfd16711c3fcf51"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/p11-kit-trust@0.26.5-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-p11-kit-aarch64", "name": "p11-kit", "versionInfo": "0.26.5-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/p11-kit-0.26.5-1.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 5f499f9cb33f1d850fd44ddd83f6fd67"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/p11-kit@0.26.5-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-package-notes-srpm-macros-aarch64", "name": "package-notes-srpm-macros", "versionInfo": "0.20-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/package-notes-srpm-macros-0.20-2.hum1.noarch.rpm", "licenseDeclared": "0BSD", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 4f6f48e6009eb2455ec194f477f9b058"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/package-notes-srpm-macros@0.20-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pam-libs-aarch64", "name": "pam-libs", "versionInfo": "1.7.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pam-libs-1.7.2-4.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 0817accdede3b6812ccb3569a779a6d8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pam-libs@1.7.2-4.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-patch-aarch64", "name": "patch", "versionInfo": "2.8-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/patch-2.8-6.2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 910596093cdbbae37d1239e3cda57bde"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/patch@2.8-6.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-syntax-aarch64", "name": "pcre2-syntax", "versionInfo": "10.49-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pcre2-syntax-10.49-0.2.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 5892ce77122ec3ecfec34fe8679d2737"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2-syntax@10.49-0.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-aarch64", "name": "pcre2", "versionInfo": "10.49-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pcre2-10.49-0.2.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 622d6d1f1739dc65c97a7364e8a36f54"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2@10.49-0.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-perl-srpm-macros-aarch64", "name": "perl-srpm-macros", "versionInfo": "1-65.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/perl-srpm-macros-1-65.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 0f8b16c4e63430bcff87cb49fa941740"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/perl-srpm-macros@1-65.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-m4-aarch64", "name": "pkgconf-m4", "versionInfo": "2.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pkgconf-m4-2.5.1-2.1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later WITH Autoconf-exception-generic", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 2ee038a201817d6d825292dc25c6b873"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf-m4@2.5.1-2.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-pkg-config-aarch64", "name": "pkgconf-pkg-config", "versionInfo": "2.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pkgconf-pkg-config-2.5.1-2.1.hum1.aarch64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 194d02d87ca34faf276f41dc542e7cfb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf-pkg-config@2.5.1-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-aarch64", "name": "pkgconf", "versionInfo": "2.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pkgconf-2.5.1-2.1.hum1.aarch64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 390abfa946645d0fa5872ec37b6fff03"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf@2.5.1-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-policycoreutils-aarch64", "name": "policycoreutils", "versionInfo": "3.11-2.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/policycoreutils-3.11-2.3.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: f29476a3edf8d66a1a2681c976ea4306"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/policycoreutils@3.11-2.3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-popt-aarch64", "name": "popt", "versionInfo": "1.19-11.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/popt-1.19-11.2.hum1.aarch64.rpm", "licenseDeclared": "MIT AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: a59267807d08c6f2f57cd3504fe46e1b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/popt@1.19-11.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-publicsuffix-list-dafsa-aarch64", "name": "publicsuffix-list-dafsa", "versionInfo": "20260624-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/publicsuffix-list-dafsa-20260624-2.1.hum1.noarch.rpm", "licenseDeclared": "MPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 258b22e06326223e99678d8138bba57d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/publicsuffix-list-dafsa@20260624-2.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pyproject-srpm-macros-aarch64", "name": "pyproject-srpm-macros", "versionInfo": "1.23.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pyproject-srpm-macros-1.23.2-1.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: e82edc55e5be2f520af44c2b0337e92a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pyproject-srpm-macros@1.23.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python-pip-wheel-aarch64", "name": "python-pip-wheel", "versionInfo": "26.2-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/python-pip-wheel-26.2-0.2.hum1.noarch.rpm", "licenseDeclared": "MIT AND Python-2.0.1 AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MPL-2.0 AND (Apache-2.0 OR BSD-2-Clause)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 30b1136e6baf2dc70c7e01a45cf96050"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python-pip-wheel@26.2-0.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python-srpm-macros-aarch64", "name": "python-srpm-macros", "versionInfo": "3.14-12.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/python-srpm-macros-3.14-12.2.hum1.noarch.rpm", "licenseDeclared": "MIT AND PSF-2.0 AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 618d0c006548a702f22df8ec49dca3a5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python-srpm-macros@3.14-12.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-boolean.py-aarch64", "name": "python3-boolean.py", "versionInfo": "5.0-10.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/aarch64/os/Packages/p/python3-boolean.py-5.0-10.fc44.noarch.rpm", "licenseDeclared": "NOASSERTION", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: b7af00dcc3668fd56d3b09f1f1b171a9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-boolean.py@5.0-10.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-libs-aarch64", "name": "python3-libs", "versionInfo": "3.14.8-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/python3-libs-3.14.8-1.1.hum1.aarch64.rpm", "licenseDeclared": "Python-2.0.1 AND MIT AND BSD-3-Clause AND MIT-CMU AND HPND-SMC AND BSD-2-Clause AND dtoa AND Unicode-3.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 49ec99ea0399105d541434d8d38f18da"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-libs@3.14.8-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-license-expression-aarch64", "name": "python3-license-expression", "versionInfo": "30.4.4-4.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/aarch64/os/Packages/p/python3-license-expression-30.4.4-4.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 009ffab3cc792b96ce398d6c97aa5a0a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-license-expression@30.4.4-4.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-aarch64", "name": "python3", "versionInfo": "3.14.8-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/python3-3.14.8-1.1.hum1.aarch64.rpm", "licenseDeclared": "Python-2.0.1", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 18ffabe8c4f4771f14d1a2dbca1a79fe"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3@3.14.8-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-qt5-srpm-macros-aarch64", "name": "qt5-srpm-macros", "versionInfo": "5.15.18-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/q/qt5-srpm-macros-5.15.18-3.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 4ffb52b3bdf4017e6c58f49b621e1c54"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/qt5-srpm-macros@5.15.18-3.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-qt6-srpm-macros-aarch64", "name": "qt6-srpm-macros", "versionInfo": "6.11.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/q/qt6-srpm-macros-6.11.2-1.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 8478ebf3654d031de2c0964fb1f5d8a2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/qt6-srpm-macros@6.11.2-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-readline-aarch64", "name": "readline", "versionInfo": "8.3-7.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/readline-8.3-7.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 53feb6b9f0049bf2784fa793f91a2910"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/readline@8.3-7.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-redhat-rpm-config-aarch64", "name": "redhat-rpm-config", "versionInfo": "345-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/redhat-rpm-config-345-4.hum1.noarch.rpm", "licenseDeclared": "GPL-1.0-or-later AND GPL-2.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 9e9b9de801d40d8b16d77058da82cde9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/redhat-rpm-config@345-4.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-build-libs-aarch64", "name": "rpm-build-libs", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rpm-build-libs-6.1.0-1.2.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 4262ef24ddbef7bb949209d16e4630d5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-build-libs@6.1.0-1.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-build-aarch64", "name": "rpm-build", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rpm-build-6.1.0-1.2.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 08a854828dea1b4a5738d93cbe23ea7c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-build@6.1.0-1.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-libs-aarch64", "name": "rpm-libs", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rpm-libs-6.1.0-1.2.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: f3a2dbc2d4e31759c79c7d665daa59a5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-libs@6.1.0-1.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-plugin-selinux-aarch64", "name": "rpm-plugin-selinux", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rpm-plugin-selinux-6.1.0-1.2.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 3aa7f0b11ef4d932edf55fa41f2a2b95"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-plugin-selinux@6.1.0-1.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-sequoia-aarch64", "name": "rpm-sequoia", "versionInfo": "1.10.1.1-1.5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rpm-sequoia-1.10.1.1-1.5.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.0-or-later AND Apache-2.0 AND BSL-1.0 AND MIT AND Unicode-DFS-2016 AND (Apache-2.0 OR MIT) AND (MIT OR Apache-2.0 OR Zlib) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 1b48403219c7366b55923e38b4f53df4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-sequoia@1.10.1.1-1.5.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-sign-libs-aarch64", "name": "rpm-sign-libs", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rpm-sign-libs-6.1.0-1.2.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: eb5c1682e184f95275ab6d0859b29798"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-sign-libs@6.1.0-1.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-aarch64", "name": "rpm", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rpm-6.1.0-1.2.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 56834dc918edb7e3620729c2a4b9d7bc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm@6.1.0-1.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rust-srpm-macros-aarch64", "name": "rust-srpm-macros", "versionInfo": "28.5-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rust-srpm-macros-28.5-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 606a7a2166723ba0e3515fa8244596dc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rust-srpm-macros@28.5-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sed-aarch64", "name": "sed", "versionInfo": "4.10-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/sed-4.10-2.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 3d32547783b16324bc14edaa05196fa0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sed@4.10-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-selinux-policy-targeted-aarch64", "name": "selinux-policy-targeted", "versionInfo": "45.21-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/selinux-policy-targeted-45.21-1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: afd3a0e6066718b6633918ff5031c1ce"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/selinux-policy-targeted@45.21-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-selinux-policy-aarch64", "name": "selinux-policy", "versionInfo": "45.21-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/selinux-policy-45.21-1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 910958d9c5c1913d447a1e64fb0ad0b6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/selinux-policy@45.21-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-setup-aarch64", "name": "setup", "versionInfo": "2.15.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/setup-2.15.1-2.1.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 7306efa4649c49f3d249269ae6781e58"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/setup@2.15.1-2.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-shadow-utils-aarch64", "name": "shadow-utils", "versionInfo": "2:4.20.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/shadow-utils-4.20.0-1.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 2e89cf130885f48a35b69f11f4949c38"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/shadow-utils@4.20.0-1.1.hum1?arch=aarch64&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sqlite-libs-aarch64", "name": "sqlite-libs", "versionInfo": "3.54.0-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/sqlite-libs-3.54.0-0.1.hum1.aarch64.rpm", "licenseDeclared": "blessing", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 07e9e3c90b4ca4ef550b8b5b4115e5c0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sqlite-libs@3.54.0-0.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-libs-aarch64", "name": "systemd-libs", "versionInfo": "261.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/systemd-libs-261.2-1.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 70d8146669255ba05ce2f1f4569a53ea"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-libs@261.2-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-standalone-sysusers-aarch64", "name": "systemd-standalone-sysusers", "versionInfo": "261.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/systemd-standalone-sysusers-261.2-1.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: c1d8fb208e84a77c514da417404b8f0b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-standalone-sysusers@261.2-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tar-aarch64", "name": "tar", "versionInfo": "2:1.35-10.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/t/tar-1.35-10.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 4e587755d33c8d0282c9c40fc74c0f79"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tar@1.35-10.1.hum1?arch=aarch64&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tpm2-tss-aarch64", "name": "tpm2-tss", "versionInfo": "4.2.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/t/tpm2-tss-4.2.0-1.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 9ffd7ed639cb171e2130e301bcefd292"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tpm2-tss@4.2.0-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tree-sitter-srpm-macros-aarch64", "name": "tree-sitter-srpm-macros", "versionInfo": "0.4.6-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/t/tree-sitter-srpm-macros-0.4.6-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: f65af17df28df341ec383338fcc47481"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tree-sitter-srpm-macros@0.4.6-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tzdata-aarch64", "name": "tzdata", "versionInfo": "2026e-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/t/tzdata-2026e-1.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain AND (GPL-2.0-only WITH ClassPath-exception-2.0)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: a1336045dee9a14e5ecb98f2e75ca023"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tzdata@2026e-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-unzip-aarch64", "name": "unzip", "versionInfo": "6.0-71.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/u/unzip-6.0-71.1.hum1.aarch64.rpm", "licenseDeclared": "Info-ZIP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 87ad5c5b51db9c1f6fa9c96637ffd252"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/unzip@6.0-71.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-util-linux-core-aarch64", "name": "util-linux-core", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/u/util-linux-core-2.42.4-2.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: fc17431aba800b112050d86c4f27804b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/util-linux-core@2.42.4-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-util-linux-aarch64", "name": "util-linux", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/u/util-linux-2.42.4-2.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-1.0-or-later AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 87a04208a28df627928b6ffdc49da18a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/util-linux@2.42.4-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-which-aarch64", "name": "which", "versionInfo": "2.25-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/w/which-2.25-2.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 3acbde8cc3977af8ce2112397cde2817"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/which@2.25-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xxhash-libs-aarch64", "name": "xxhash-libs", "versionInfo": "0.8.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/x/xxhash-libs-0.8.4-1.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 94a4e68282f894848dfcd600c156394a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xxhash-libs@0.8.4-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xz-libs-aarch64", "name": "xz-libs", "versionInfo": "1:5.8.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/x/xz-libs-5.8.4-1.1.hum1.aarch64.rpm", "licenseDeclared": "0BSD", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 712ddac4015f3e0a52a2b3f765e8e191"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xz-libs@5.8.4-1.1.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xz-aarch64", "name": "xz", "versionInfo": "1:5.8.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/x/xz-5.8.4-1.1.hum1.aarch64.rpm", "licenseDeclared": "0BSD AND GPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: db94e077cd214b5c423f7b4c59622c14"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xz@5.8.4-1.1.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zig-srpm-macros-aarch64", "name": "zig-srpm-macros", "versionInfo": "1-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/z/zig-srpm-macros-1-9.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 0c226eb1fa4d5fc3d272055b6397b077"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zig-srpm-macros@1-9.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zip-aarch64", "name": "zip", "versionInfo": "3.0-46.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/z/zip-3.0-46.1.hum1.aarch64.rpm", "licenseDeclared": "Info-ZIP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 901de5c8acb50bc2000cc1ff85afa11a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zip@3.0-46.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zlib-ng-compat-aarch64", "name": "zlib-ng-compat", "versionInfo": "2.3.3-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/z/zlib-ng-compat-2.3.3-6.1.hum1.aarch64.rpm", "licenseDeclared": "Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 06962c93fec8b49e0c12e23e7154ded4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zlib-ng-compat@2.3.3-6.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zstd-aarch64", "name": "zstd", "versionInfo": "1.5.7-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/z/zstd-1.5.7-6.2.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 0537b67afcf0c266515477de756f6dee"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zstd@1.5.7-6.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-grype-s390x", "name": "grype-buildroot-s390x", "versionInfo": "1b5c597e", "downloadLocation": "NOASSERTION", "filesAnalyzed": false}, {"SPDXID": "SPDXRef-Buildroot-Package-R-srpm-macros-s390x", "name": "R-srpm-macros", "versionInfo": "1.3.7-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/r/R-srpm-macros-1.3.7-3.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: af95299e83e51b62a40fa7a42d357077"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/R-srpm-macros@1.3.7-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-add-determinism-s390x", "name": "add-determinism", "versionInfo": "0.7.3-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/a/add-determinism-0.7.3-3.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND MIT AND Unicode-DFS-2016 AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 OR MIT) AND (Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND (MIT OR Zlib OR Apache-2.0) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: ef237928cb1bc6d180183d4f2ea933da"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/add-determinism@0.7.3-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-alternatives-s390x", "name": "alternatives", "versionInfo": "1.33-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/a/alternatives-1.33-6.1.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 8c032a32d77cea45153f36640ad59a1e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/alternatives@1.33-6.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-annobin-docs-s390x", "name": "annobin-docs", "versionInfo": "13.32-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/a/annobin-docs-13.32-1.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND GFDL-1.3-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 18d60a72e7a0be13693c92c6e0d885c9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/annobin-docs@13.32-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-annobin-plugin-gcc-s390x", "name": "annobin-plugin-gcc", "versionInfo": "13.32-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/a/annobin-plugin-gcc-13.32-1.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND GFDL-1.3-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: c2981c7ef3c6275bbfe316b04a4705e3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/annobin-plugin-gcc@13.32-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ansible-srpm-macros-s390x", "name": "ansible-srpm-macros", "versionInfo": "1-22.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/a/ansible-srpm-macros-1-22.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 6343ff368e5236625d015dbc91e70769"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ansible-srpm-macros@1-22.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-askalono-cli-s390x", "name": "askalono-cli", "versionInfo": "0.5.0-4.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora-secondary/releases/44/Everything/s390x/os/Packages/a/askalono-cli-0.5.0-4.fc44.s390x.rpm", "licenseDeclared": "Apache-2.0 AND CC0-1.0 AND MIT AND Unicode-DFS-2016 AND (Apache-2.0 OR BSL-1.0) AND (Apache-2.0 OR MIT) AND (MIT OR Apache-2.0 OR Zlib) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: f3b6a225d693b4eaf4215d1c8286cc57"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/askalono-cli@0.5.0-4.fc44?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-audit-libs-s390x", "name": "audit-libs", "versionInfo": "4.2.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/a/audit-libs-4.2.1-2.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: b3d73496d23c446bac22a36930e8bf25"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/audit-libs@4.2.1-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bash-s390x", "name": "bash", "versionInfo": "5.3.20-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/b/bash-5.3.20-1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: f0cc885ec126817b70443273e779f324"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bash@5.3.20-1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-binutils-s390x", "name": "binutils", "versionInfo": "2.46.1-1.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/b/binutils-2.46.1-1.3.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-3.0-or-later WITH Bison-exception-2.2) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND BSD-3-Clause AND GFDL-1.3-or-later AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 01d2db020c2738eb1fc6d20bb1ac387a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/binutils@2.46.1-1.3.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-build-reproducibility-srpm-macros-s390x", "name": "build-reproducibility-srpm-macros", "versionInfo": "0.7.3-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/b/build-reproducibility-srpm-macros-0.7.3-3.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 4dea8bdbe97b4534f60d8a6d0b9c793c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/build-reproducibility-srpm-macros@0.7.3-3.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bzip2-libs-s390x", "name": "bzip2-libs", "versionInfo": "1.0.8-24.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/b/bzip2-libs-1.0.8-24.1.hum1.s390x.rpm", "licenseDeclared": "BSD-4-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: de07601087c4eb722dcb0971aaa6fbea"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bzip2-libs@1.0.8-24.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bzip2-s390x", "name": "bzip2", "versionInfo": "1.0.8-24.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/b/bzip2-1.0.8-24.1.hum1.s390x.rpm", "licenseDeclared": "BSD-4-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: df662eeb30bc1dc3f0647b081dc96498"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bzip2@1.0.8-24.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ca-certificates-s390x", "name": "ca-certificates", "versionInfo": "2026.2.90_v9.0.317-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/c/ca-certificates-2026.2.90_v9.0.317-1.1.hum1.noarch.rpm", "licenseDeclared": "MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: a195cd97c3daf258791a89c2b5af39d2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ca-certificates@2026.2.90_v9.0.317-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cmake-srpm-macros-s390x", "name": "cmake-srpm-macros", "versionInfo": "4.3.0-5.6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/c/cmake-srpm-macros-4.3.0-5.6.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND MIT-open-group AND Zlib AND Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: e2f14e03350d92477884a522df888c53"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cmake-srpm-macros@4.3.0-5.6.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-coreutils-common-s390x", "name": "coreutils-common", "versionInfo": "9.12-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/c/coreutils-common-9.12-1.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-no-invariants-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: ca1ea021eaf98e265d862c5e006b9b28"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/coreutils-common@9.12-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-coreutils-s390x", "name": "coreutils", "versionInfo": "9.12-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/c/coreutils-9.12-1.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-no-invariants-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 125a9c8661c2a4b1ae3cdca1e9773553"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/coreutils@9.12-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cpio-s390x", "name": "cpio", "versionInfo": "2.15-10.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/c/cpio-2.15-10.2.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 320683292765c2b9e194d914e1467b02"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cpio@2.15-10.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cpp-s390x", "name": "cpp", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/c/cpp-16.2.1-3.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 9ffd80ab81d488b07f159598e610a683"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cpp@16.2.1-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-crypto-policies-config-default-s390x", "name": "crypto-policies-config-default", "versionInfo": "20260812-1.git359ab16.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/c/crypto-policies-config-default-20260812-1.git359ab16.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 1e6fce169a2973e4f665428cb52ae9ad"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/crypto-policies-config-default@20260812-1.git359ab16.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-crypto-policies-s390x", "name": "crypto-policies", "versionInfo": "20260812-1.git359ab16.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/c/crypto-policies-20260812-1.git359ab16.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 9756d9b800cfeafa3f39e494328a620e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/crypto-policies@20260812-1.git359ab16.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-curl-s390x", "name": "curl", "versionInfo": "8.22.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/c/curl-8.22.0-1.1.hum1.s390x.rpm", "licenseDeclared": "curl", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 5b4faa6ce7e8c0fcb895a62f9fd50cde"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/curl@8.22.0-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cyrus-sasl-lib-s390x", "name": "cyrus-sasl-lib", "versionInfo": "2.1.28-37.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/c/cyrus-sasl-lib-2.1.28-37.2.hum1.s390x.rpm", "licenseDeclared": "BSD-Attribution-HPND-disclaimer", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: b8c311ffd73582f8a5ee475b0f6a5aad"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cyrus-sasl-lib@2.1.28-37.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-debugedit-s390x", "name": "debugedit", "versionInfo": "5.3-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/d/debugedit-5.3-3.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 7ce0d08f82624617a229c20106310c56"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/debugedit@5.3-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-diffutils-s390x", "name": "diffutils", "versionInfo": "3.12-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/d/diffutils-3.12-6.2.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 833a118082d70b4cc23d82b506975341"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/diffutils@3.12-6.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-dwz-s390x", "name": "dwz", "versionInfo": "0.17-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/d/dwz-0.17-3.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND GPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 39608f83a2b2566a2fd28664b3f167a7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/dwz@0.17-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ed-s390x", "name": "ed", "versionInfo": "1.22.6-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/e/ed-1.22.6-1.1.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-only AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 9689ad8a7bf1baf643da266932d78301"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ed@1.22.6-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-efi-srpm-macros-s390x", "name": "efi-srpm-macros", "versionInfo": "6-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/e/efi-srpm-macros-6-9.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: cba49c2554beb37df9cc6bb744737e2b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/efi-srpm-macros@6-9.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-debuginfod-client-s390x", "name": "elfutils-debuginfod-client", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/e/elfutils-debuginfod-client-0.196-1.1.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-2.0-or-later OR LGPL-3.0-or-later)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: edf1d7f609d4a899c31d06eaa2536e7d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-debuginfod-client@0.196-1.1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-libelf-s390x", "name": "elfutils-libelf", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/e/elfutils-libelf-0.196-1.1.1.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: c5fd8893c9ef89a8725e9990f060ed3a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-libelf@0.196-1.1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-libs-s390x", "name": "elfutils-libs", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/e/elfutils-libs-0.196-1.1.1.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 4bd7efde617708ec5b2dea0dec41a3d1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-libs@0.196-1.1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-s390x", "name": "elfutils", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/e/elfutils-0.196-1.1.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-2.0-or-later OR LGPL-3.0-or-later) AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: edc55be4985a5706252e40802deeedfb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils@0.196-1.1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-erlang-srpm-macros-s390x", "name": "erlang-srpm-macros", "versionInfo": "0.3.11-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/e/erlang-srpm-macros-0.3.11-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 063020bc2b254fec865c06f313930cec"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/erlang-srpm-macros@0.3.11-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-expat-s390x", "name": "expat", "versionInfo": "2.8.5-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/e/expat-2.8.5-1.2.hum1.s390x.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 059049bbec0de1d63e937fdda5fd572a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/expat@2.8.5-1.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-file-libs-s390x", "name": "file-libs", "versionInfo": "5.48-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/f/file-libs-5.48-3.1.hum1.s390x.rpm", "licenseDeclared": "BSD-2-Clause-Darwin AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 33857bdaf6d7d005ee71155a1a5ca9d2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/file-libs@5.48-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-filesystem-srpm-macros-s390x", "name": "filesystem-srpm-macros", "versionInfo": "3.18-59.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/f/filesystem-srpm-macros-3.18-59.1.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: cff1a42588f4eb1a758735b668069a67"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/filesystem-srpm-macros@3.18-59.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-filesystem-s390x", "name": "filesystem", "versionInfo": "3.18-59.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/f/filesystem-3.18-59.1.hum1.s390x.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: d0b8d5222fccbf85251856cf3dc1f93a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/filesystem@3.18-59.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-file-s390x", "name": "file", "versionInfo": "5.48-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/f/file-5.48-3.1.hum1.s390x.rpm", "licenseDeclared": "BSD-2-Clause-Darwin AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: dccc8e9259bf806446e1dbfac59f5a52"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/file@5.48-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-findutils-s390x", "name": "findutils", "versionInfo": "1:4.11.0-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/f/findutils-4.11.0-2.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 5c745a203687e3ebcfc0a1f170f8a7c3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/findutils@4.11.0-2.1.hum1?arch=s390x&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-fonts-srpm-macros-s390x", "name": "fonts-srpm-macros", "versionInfo": "1:5.0.0-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/f/fonts-srpm-macros-5.0.0-4.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 72e451571f24737949a256d091508d0c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/fonts-srpm-macros@5.0.0-4.hum1?arch=noarch&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-forge-srpm-macros-s390x", "name": "forge-srpm-macros", "versionInfo": "0.4.0-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/f/forge-srpm-macros-0.4.0-5.hum1.noarch.rpm", "licenseDeclared": "GPL-1.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: bfbed65969ec708556df3750591a377d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/forge-srpm-macros@0.4.0-5.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-fpc-srpm-macros-s390x", "name": "fpc-srpm-macros", "versionInfo": "1.3-17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/f/fpc-srpm-macros-1.3-17.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 1f7e4cb902ccc37236f8d34ff8873cf2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/fpc-srpm-macros@1.3-17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gap-srpm-macros-s390x", "name": "gap-srpm-macros", "versionInfo": "2-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gap-srpm-macros-2-3.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 70e3423696085d13791fefc0be7cdf15"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gap-srpm-macros@2-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gawk-s390x", "name": "gawk", "versionInfo": "5.4.1-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gawk-5.4.1-1.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: f62b6f1060564ddadc8a6d8b38bdced1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gawk@5.4.1-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gcc-plugin-annobin-s390x", "name": "gcc-plugin-annobin", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gcc-plugin-annobin-16.2.1-3.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 768767978c834cc04dead07bab328f69"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gcc-plugin-annobin@16.2.1-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gcc-s390x", "name": "gcc", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gcc-16.2.1-3.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: a8f6736c45d3cd00aea31f9f50a44786"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gcc@16.2.1-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gdb-minimal-s390x", "name": "gdb-minimal", "versionInfo": "17.2-4.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora-secondary/updates/44/Everything/s390x/Packages/g/gdb-minimal-17.2-4.fc44.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND BSD-3-Clause AND FSFAP AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain AND GFDL-1.3-or-later AND LGPL-2.0-or-later WITH GCC-exception-2.0 AND GPL-3.0-or-later WITH GCC-exception-3.1 AND GPL-2.0-or-later WITH GNU-compiler-exception AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 705692552ef65f3e1ee98c2d999ec5d3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gdb-minimal@17.2-4.fc44?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gdbm-libs-s390x", "name": "gdbm-libs", "versionInfo": "1:1.26-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gdbm-libs-1.26-1.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 212fc20a38ea2074ee36a62fbf7f2f62"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gdbm-libs@1.26-1.1.hum1?arch=s390x&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ghc-srpm-macros-s390x", "name": "ghc-srpm-macros", "versionInfo": "1.10-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/ghc-srpm-macros-1.10-2.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: c59363c566e4f370953f5f4b048e594e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ghc-srpm-macros@1.10-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-common-s390x", "name": "glibc-common", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/glibc-common-2.43-9.2.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: a8dea3c606ec6891265a77017aece063"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-common@2.43-9.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-devel-s390x", "name": "glibc-devel", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/glibc-devel-2.43-9.2.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 75a543cbb69964f1f02926ccce9fa1cb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-devel@2.43-9.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-gconv-extra-s390x", "name": "glibc-gconv-extra", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/glibc-gconv-extra-2.43-9.2.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 5cbdda59f2c164e806865d4a30e07eab"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-gconv-extra@2.43-9.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-minimal-langpack-s390x", "name": "glibc-minimal-langpack", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/glibc-minimal-langpack-2.43-9.2.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: cc1a51d0faaecc7eac98cdf1ee613134"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-minimal-langpack@2.43-9.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-s390x", "name": "glibc", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/glibc-2.43-9.2.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 52dfafc55e889e2d8a2dac9245ab0068"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc@2.43-9.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gmp-s390x", "name": "gmp", "versionInfo": "1:6.3.0-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gmp-6.3.0-6.1.hum1.s390x.rpm", "licenseDeclared": "(LGPL-3.0-or-later OR GPL-2.0-or-later OR (LGPL-3.0-or-later AND GPL-2.0-or-later)) AND GFDL-1.3-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 9e9c7bef27b1f9c662c8064f6fed47c7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gmp@6.3.0-6.1.hum1?arch=s390x&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnat-srpm-macros-s390x", "name": "gnat-srpm-macros", "versionInfo": "7-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gnat-srpm-macros-7-3.hum1.noarch.rpm", "licenseDeclared": "FSFAP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 66efb6ab04e5e1a84478a688e2f149a3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnat-srpm-macros@7-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnome-srpm-macros-s390x", "name": "gnome-srpm-macros", "versionInfo": "1.0-1.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora-secondary/updates/44/Everything/s390x/Packages/g/gnome-srpm-macros-1.0-1.fc44.noarch.rpm", "licenseDeclared": "Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 2bbaa6afcb861d76b0036e4b5bf9b3be"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnome-srpm-macros@1.0-1.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnulib-l10n-s390x", "name": "gnulib-l10n", "versionInfo": "20241231-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gnulib-l10n-20241231-4.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 5628836ab4d4e824bcadb20d87a01a33"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnulib-l10n@20241231-4.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-dirmngr-s390x", "name": "gnupg2-dirmngr", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gnupg2-dirmngr-2.4.9-18.2.hum1.s390x.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: d101e0fe84237b495788851e8eea6236"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-dirmngr@2.4.9-18.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-gpg-agent-s390x", "name": "gnupg2-gpg-agent", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gnupg2-gpg-agent-2.4.9-18.2.hum1.s390x.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: c3d01adde2cdc888413588f5b899e37c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-gpg-agent@2.4.9-18.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-gpgconf-s390x", "name": "gnupg2-gpgconf", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gnupg2-gpgconf-2.4.9-18.2.hum1.s390x.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: a7e2b966cd08292e56bec3ef01b91333"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-gpgconf@2.4.9-18.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-keyboxd-s390x", "name": "gnupg2-keyboxd", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gnupg2-keyboxd-2.4.9-18.2.hum1.s390x.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 39fc1144a8716d29aec25a61af031790"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-keyboxd@2.4.9-18.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-verify-s390x", "name": "gnupg2-verify", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gnupg2-verify-2.4.9-18.2.hum1.s390x.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 55bcec1291392bc641bd9160eafb60ab"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-verify@2.4.9-18.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-s390x", "name": "gnupg2", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gnupg2-2.4.9-18.2.hum1.s390x.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 7fe21b8ec6f4bdbcff1a9f273668375c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2@2.4.9-18.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnutls-s390x", "name": "gnutls", "versionInfo": "3.8.13-5.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gnutls-3.8.13-5.2.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 8df51fe97148aac97285db2527c6b27c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnutls@3.8.13-5.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-filesystem-s390x", "name": "go-filesystem", "versionInfo": "3.8.0-2.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora-secondary/releases/44/Everything/s390x/os/Packages/g/go-filesystem-3.8.0-2.fc44.s390x.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: c0e14cfe7efe84aa2eeadac34b45b086"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-filesystem@3.8.0-2.fc44?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-rpm-macros-s390x", "name": "go-rpm-macros", "versionInfo": "3.8.0-2.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora-secondary/releases/44/Everything/s390x/os/Packages/g/go-rpm-macros-3.8.0-2.fc44.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: c598c878bf7aec955ff55511e766215a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-rpm-macros@3.8.0-2.fc44?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-srpm-macros-s390x", "name": "go-srpm-macros", "versionInfo": "3.8.0-2.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora-secondary/releases/44/Everything/s390x/os/Packages/g/go-srpm-macros-3.8.0-2.fc44.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 6f0b3791a6d27bf3a0297bd5d9133203"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-srpm-macros@3.8.0-2.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-vendor-tools-s390x", "name": "go-vendor-tools", "versionInfo": "0.12.0-1.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora-secondary/updates/44/Everything/s390x/Packages/g/go-vendor-tools-0.12.0-1.fc44.noarch.rpm", "licenseDeclared": "MIT AND BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 7c4ed6389413dbed713121b1168f24da"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-vendor-tools@0.12.0-1.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-bin-s390x", "name": "golang1.27-bin", "versionInfo": "1.27.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/golang1.27-bin-1.27.2-1.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: e6a920d4eb2b33fcb2475d86a4b28401"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27-bin@1.27.2-1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-src-s390x", "name": "golang1.27-src", "versionInfo": "1.27.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/golang1.27-src-1.27.2-1.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: f40c9e87cab011209fed012b75f85d64"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27-src@1.27.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-s390x", "name": "golang1.27", "versionInfo": "1.27.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/golang1.27-1.27.2-1.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 46513f6da828743f955dd01c4e4048e3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27@1.27.2-1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golist-s390x", "name": "golist", "versionInfo": "0.10.4-11.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora-secondary/releases/44/Everything/s390x/os/Packages/g/golist-0.10.4-11.fc44.s390x.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 33a730e9c0e05ea94958b3e133ad96e7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golist@0.10.4-11.fc44?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gpgverify-s390x", "name": "gpgverify", "versionInfo": "2.2-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gpgverify-2.2-5.hum1.noarch.rpm", "licenseDeclared": "Boehm-GC", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 9637bdca60814388d4c5b144d923e6d4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gpgverify@2.2-5.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-grep-s390x", "name": "grep", "versionInfo": "3.12-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/grep-3.12-4.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: be302c3fba90b6802d063da201229aba"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/grep@3.12-4.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gzip-s390x", "name": "gzip", "versionInfo": "1.15-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gzip-1.15-1.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: e975013a39c5a3abacf0746083cb2a3f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gzip@1.15-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-gpg-keys-s390x", "name": "hummingbird-gpg-keys", "versionInfo": "20251124-1.17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/h/hummingbird-gpg-keys-20251124-1.17.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 01a73721cc0ecdcb5d9f3929f6777157"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-gpg-keys@20251124-1.17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-release-s390x", "name": "hummingbird-release", "versionInfo": "20251124-1.17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/h/hummingbird-release-20251124-1.17.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: d1c993eba75002797ea72c3cd1266853"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-release@20251124-1.17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-repos-s390x", "name": "hummingbird-repos", "versionInfo": "20251124-1.17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/h/hummingbird-repos-20251124-1.17.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 1704eb0434ddab68e1c756070246f576"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-repos@20251124-1.17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ima-evm-utils-libs-s390x", "name": "ima-evm-utils-libs", "versionInfo": "1.6.2-12.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/i/ima-evm-utils-libs-1.6.2-12.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 39381b73d7f0bf0b47d0f43e2553085b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ima-evm-utils-libs@1.6.2-12.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-info-s390x", "name": "info", "versionInfo": "7.2-9.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora-secondary/releases/44/Everything/s390x/os/Packages/i/info-7.2-9.fc44.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: fff27099388f98905cc71156882366f9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/info@7.2-9.fc44?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-jansson-s390x", "name": "jansson", "versionInfo": "2.14-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/j/jansson-2.14-5.1.hum1.s390x.rpm", "licenseDeclared": "MIT AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 552c8b09d6f785ebe3ecf37d2a97b709"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/jansson@2.14-5.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-java-srpm-macros-s390x", "name": "java-srpm-macros", "versionInfo": "1-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/j/java-srpm-macros-1-9.hum1.noarch.rpm", "licenseDeclared": "MIT-0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 367fafb59cbd6a02034ba8bafdafe9c9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/java-srpm-macros@1-9.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-json-c-s390x", "name": "json-c", "versionInfo": "0.18-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/j/json-c-0.18-9.1.hum1.s390x.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 8d14ce4c56a1c08cec53088767d4424c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/json-c@0.18-9.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-kernel-headers-s390x", "name": "kernel-headers", "versionInfo": "7.2.0-61.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/k/kernel-headers-7.2.0-61.1.hum1.s390x.rpm", "licenseDeclared": "((GPL-2.0-only WITH Linux-syscall-note) OR BSD-2-Clause) AND ((GPL-2.0-only WITH Linux-syscall-note) OR BSD-3-Clause) AND ((GPL-2.0-only WITH Linux-syscall-note) OR CDDL-1.0) AND ((GPL-2.0-only WITH Linux-syscall-note) OR Linux-OpenIB) AND ((GPL-2.0-only WITH Linux-syscall-note) OR MIT) AND ((GPL-2.0-or-later WITH Linux-syscall-note) OR BSD-3-Clause) AND ((GPL-2.0-or-later WITH Linux-syscall-note) OR MIT) AND BSD-3-Clause AND (GPL-1.0-or-later WITH Linux-syscall-note) AND GPL-2.0-only AND (GPL-2.0-only WITH Linux-syscall-note) AND (GPL-2.0-or-later WITH Linux-syscall-note) AND (LGPL-2.0-or-later WITH Linux-syscall-note) AND (LGPL-2.1-only WITH Linux-syscall-note) AND (LGPL-2.1-or-later WITH Linux-syscall-note) AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 116d73f463cd21f533e34ba97a2011de"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/kernel-headers@7.2.0-61.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-kernel-srpm-macros-s390x", "name": "kernel-srpm-macros", "versionInfo": "1.0-30.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/k/kernel-srpm-macros-1.0-30.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: d6fe851b8eed59b0b3ed90411974a3f1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/kernel-srpm-macros@1.0-30.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-keyutils-libs-s390x", "name": "keyutils-libs", "versionInfo": "1.6.3-8.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/k/keyutils-libs-1.6.3-8.1.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 76a1051bcc56312b436407503fd6a16e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/keyutils-libs@1.6.3-8.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-krb5-libs-s390x", "name": "krb5-libs", "versionInfo": "1.22.2-10.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/k/krb5-libs-1.22.2-10.3.hum1.s390x.rpm", "licenseDeclared": "Brian-Gladman-2-Clause AND BSD-2-Clause AND (BSD-2-Clause OR GPL-2.0-or-later) AND BSD-2-Clause-first-lines AND BSD-3-Clause AND BSD-4-Clause AND CMU-Mach-nodoc AND FSFULLRWD AND HPND AND HPND-export2-US AND HPND-export-US AND HPND-export-US-acknowledgement AND HPND-export-US-modify AND ISC AND MIT AND MIT-CMU AND OLDAP-2.8 AND OpenVision", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 5ead3540a46eeab91cdeba262d8b04ae"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/krb5-libs@1.22.2-10.3.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libacl-s390x", "name": "libacl", "versionInfo": "2.4.0-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libacl-2.4.0-2.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 9bfd8102f8671689a86d2afeb0169efc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libacl@2.4.0-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libarchive-s390x", "name": "libarchive", "versionInfo": "3.8.9-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libarchive-3.8.9-2.1.hum1.s390x.rpm", "licenseDeclared": "BSD-2-Clause AND FSFULLR AND GPL-2.0-or-later WITH Libtool-exception AND BSD-3-Clause AND FSFUL", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 813096ea6994141a774ae73f5dfb54bf"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libarchive@3.8.9-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libasan-s390x", "name": "libasan", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libasan-16.2.1-3.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 7aa5b365b15f58604609f7538938d8c2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libasan@16.2.1-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libassuan-s390x", "name": "libassuan", "versionInfo": "2.5.7-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libassuan-2.5.7-6.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 4562a9a9f17335e55b18d88835ef5f07"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libassuan@2.5.7-6.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libatomic-s390x", "name": "libatomic", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libatomic-16.2.1-3.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 6376aafb0a9925918e64aa80b4ed35ab"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libatomic@16.2.1-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libattr-s390x", "name": "libattr", "versionInfo": "2.6.0-2.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libattr-2.6.0-2.2.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: bd5a29f86127e125b4675f2e23ca8ef8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libattr@2.6.0-2.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libblkid-s390x", "name": "libblkid", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libblkid-2.42.4-2.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 44fc0311a5d308711efa28535704e4a7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libblkid@2.42.4-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libbrotli-s390x", "name": "libbrotli", "versionInfo": "1.2.0-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libbrotli-1.2.0-6.1.hum1.s390x.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: a864079840107557972998cffe7fedd9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libbrotli@1.2.0-6.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcap-ng-s390x", "name": "libcap-ng", "versionInfo": "0.9.6-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libcap-ng-0.9.6-1.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 142580b7f2e40636bb89c0f2215f9141"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcap-ng@0.9.6-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcap-s390x", "name": "libcap", "versionInfo": "2.78-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libcap-2.78-2.1.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 9091cd31b413ae1bf00d63ae33335979"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcap@2.78-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcbor-s390x", "name": "libcbor", "versionInfo": "0.14.0-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libcbor-0.14.0-3.1.hum1.s390x.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: c4b517d10dc0c6ac44d8ea9c33b33648"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcbor@0.14.0-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcom-err-s390x", "name": "libcom_err", "versionInfo": "1.47.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libcom_err-1.47.4-2.1.hum1.s390x.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 3283a8bc54cd1140763e358dda77d1db"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcom_err@1.47.4-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcurl-s390x", "name": "libcurl", "versionInfo": "8.22.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libcurl-8.22.0-1.1.hum1.s390x.rpm", "licenseDeclared": "curl", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 0c5b302f2cbe4adbfed83efcf6525505"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcurl@8.22.0-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libeconf-s390x", "name": "libeconf", "versionInfo": "0.7.9-4.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libeconf-0.7.9-4.2.hum1.s390x.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 24897f69657431bf5a09b97a16595098"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libeconf@0.7.9-4.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libevent-s390x", "name": "libevent", "versionInfo": "2.1.13-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libevent-2.1.13-1.1.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause AND ISC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 6bd1ad8bb5100a92ba23105085cc3bbb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libevent@2.1.13-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfdisk-s390x", "name": "libfdisk", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libfdisk-2.42.4-2.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: bf76b0eac43d5f3ad92d590f7e25c4c6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfdisk@2.42.4-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libffi-s390x", "name": "libffi", "versionInfo": "3.8.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libffi-3.8.0-1.1.hum1.s390x.rpm", "licenseDeclared": "MIT AND CC-PDDC AND (GPL-3.0-or-later WITH Texinfo-exception)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: daa1490d61693f9116936c3d876b5ffb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libffi@3.8.0-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfido2-s390x", "name": "libfido2", "versionInfo": "1.17.0-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libfido2-1.17.0-6.2.hum1.s390x.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 82bfccfc4dc3b475c75118f9bc74c2e6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfido2@1.17.0-6.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfsverity-s390x", "name": "libfsverity", "versionInfo": "1.7-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libfsverity-1.7-4.1.hum1.s390x.rpm", "licenseDeclared": "NOASSERTION", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 384831578e6b342f78c6ac2bca35e630"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfsverity@1.7-4.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgcc-s390x", "name": "libgcc", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libgcc-16.2.1-3.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: c427ffaf507d6cac77dae12f76be7f97"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgcc@16.2.1-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgcrypt-s390x", "name": "libgcrypt", "versionInfo": "1.12.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libgcrypt-1.12.4-1.1.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause AND (BSD-3-Clause OR GPL-2.0-only) AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later AND MIT-Modern-Variant", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 2446883791ed569227c74549116e4160"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgcrypt@1.12.4-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgomp-s390x", "name": "libgomp", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libgomp-16.2.1-3.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 7a48dd387cf2dcca87af9029bd52a9ce"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgomp@16.2.1-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgpg-error-s390x", "name": "libgpg-error", "versionInfo": "1.61-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libgpg-error-1.61-2.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later AND (BSD-3-Clause OR LGPL-2.1-or-later) AND FSFULLR AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: ffb6f30df74b815e445d90d11515374e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgpg-error@1.61-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libidn2-s390x", "name": "libidn2", "versionInfo": "2.3.8-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libidn2-2.3.8-4.1.hum1.s390x.rpm", "licenseDeclared": "(GPL-2.0-or-later OR LGPL-3.0-or-later) AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 2d2df588b059873f276603a60db2d959"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libidn2@2.3.8-4.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libksba-s390x", "name": "libksba", "versionInfo": "1.8.1-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libksba-1.8.1-1.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND (LGPL-3.0-or-later OR GPL-2.0-or-later)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 2e61e170caccf8c88ad1f90025ac5db2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libksba@1.8.1-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-liblastlog2-s390x", "name": "liblastlog2", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/liblastlog2-2.42.4-2.1.hum1.s390x.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 28b1b1bcf834fa96e49837fc22c3f84a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/liblastlog2@2.42.4-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libmount-s390x", "name": "libmount", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libmount-2.42.4-2.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: db23cb3112e0cef438ea2161e8f78959"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libmount@2.42.4-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libmpc-s390x", "name": "libmpc", "versionInfo": "1.4.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libmpc-1.4.1-2.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-3.0-or-later AND FSFAP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 88c6114ff75a60cb530e1c930e8e48a0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libmpc@1.4.1-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnghttp2-s390x", "name": "libnghttp2", "versionInfo": "1.69.0-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libnghttp2-1.69.0-6.1.hum1.s390x.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: dc406785eee18fa7e061c5e1fce9c144"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnghttp2@1.69.0-6.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnghttp3-s390x", "name": "libnghttp3", "versionInfo": "1.18.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libnghttp3-1.18.0-1.1.hum1.s390x.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 3976c42ace169ac57da71f3840eb2567"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnghttp3@1.18.0-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpkgconf-s390x", "name": "libpkgconf", "versionInfo": "2.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libpkgconf-2.5.1-2.1.hum1.s390x.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: f9793e392b28a496c552c8bcadc861d7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpkgconf@2.5.1-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpsl-s390x", "name": "libpsl", "versionInfo": "0.23.3-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libpsl-0.23.3-1.1.hum1.s390x.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: d7292c40c0f03cff92d9a954d31a28a4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpsl@0.23.3-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libselinux-utils-s390x", "name": "libselinux-utils", "versionInfo": "3.11-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libselinux-utils-3.11-5.1.hum1.s390x.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 461c4567453d97fc7bc74bf42c057eee"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libselinux-utils@3.11-5.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libselinux-s390x", "name": "libselinux", "versionInfo": "3.11-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libselinux-3.11-5.1.hum1.s390x.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 138830aa1320f79f6da74bfa4ad320fd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libselinux@3.11-5.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsemanage-s390x", "name": "libsemanage", "versionInfo": "3.11-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libsemanage-3.11-4.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: bab522bfb7542ee5ef7396dadbb3cfa2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsemanage@3.11-4.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsepol-s390x", "name": "libsepol", "versionInfo": "3.11-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libsepol-3.11-2.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: d354f33b171ee2e3daf8d1b80681816e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsepol@3.11-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsmartcols-s390x", "name": "libsmartcols", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libsmartcols-2.42.4-2.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: aebcd90843b2b9d05b05d8306381672c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsmartcols@2.42.4-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libssh-config-s390x", "name": "libssh-config", "versionInfo": "0.12.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libssh-config-0.12.2-1.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: f26ba5abb68d2fea08f751a8569faa35"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libssh-config@0.12.2-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libssh-s390x", "name": "libssh", "versionInfo": "0.12.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libssh-0.12.2-1.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 5cfcc7161aaa41cb9aabd429dd169933"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libssh@0.12.2-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libstdc++-s390x", "name": "libstdc++", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libstdc++-16.2.1-3.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 6575e03b09d764dc0b2f10318e3de716"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libstdc++@16.2.1-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtasn1-s390x", "name": "libtasn1", "versionInfo": "4.21.0-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libtasn1-4.21.0-2.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 55fcdd9b3d9fd6cad565d3d015649f77"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtasn1@4.21.0-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtool-ltdl-s390x", "name": "libtool-ltdl", "versionInfo": "2.6.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libtool-ltdl-2.6.2-1.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.0-or-later WITH Libtool-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 36bcc2c9c6efc6d7d0321cadac6cb85a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtool-ltdl@2.6.2-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libubsan-s390x", "name": "libubsan", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libubsan-16.2.1-3.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 368cf49e4a1d8d82ad82adf7447c95ac"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libubsan@16.2.1-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libunistring-s390x", "name": "libunistring", "versionInfo": "1.1-12.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libunistring-1.1-12.1.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: dd91f18d5af4f20ef9799606225e7449"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libunistring@1.1-12.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libusb1-s390x", "name": "libusb1", "versionInfo": "1.0.30-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libusb1-1.0.30-2.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: c98671d5cd78fd08e6914d049a797031"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libusb1@1.0.30-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libuuid-s390x", "name": "libuuid", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libuuid-2.42.4-2.1.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 0615723305ba8a79b30a6cdf82867fba"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libuuid@2.42.4-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libverto-s390x", "name": "libverto", "versionInfo": "0.3.2-13.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libverto-0.3.2-13.1.hum1.s390x.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: cb13852cb7d6b81b85fe55511359e65f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libverto@0.3.2-13.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxcrypt-devel-s390x", "name": "libxcrypt-devel", "versionInfo": "4.5.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libxcrypt-devel-4.5.2-4.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later AND BSD-3-Clause AND BSD-2-Clause AND BSD-2-Clause-FreeBSD AND 0BSD AND CC0-1.0 AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 1b780c78e6f5b4a014060e49fa55b087"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxcrypt-devel@4.5.2-4.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxcrypt-s390x", "name": "libxcrypt", "versionInfo": "4.5.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libxcrypt-4.5.2-4.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later AND BSD-3-Clause AND BSD-2-Clause AND BSD-2-Clause-FreeBSD AND 0BSD AND CC0-1.0 AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 08be51fb7f0629c9314cec58dee56978"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxcrypt@4.5.2-4.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxml2-16-s390x", "name": "libxml2-16", "versionInfo": "2.15.4-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libxml2-16-2.15.4-1.2.hum1.s390x.rpm", "licenseDeclared": "MIT AND ISC-Veillard AND W3C", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 01d31764a91a3b2444e68b22de4a4218"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxml2-16@2.15.4-1.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libzstd-s390x", "name": "libzstd", "versionInfo": "1.5.7-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libzstd-1.5.7-6.2.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: ed6549da4aaaf48bdfcc6793aed1854b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libzstd@1.5.7-6.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-linkdupes-s390x", "name": "linkdupes", "versionInfo": "0.7.3-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/linkdupes-0.7.3-3.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND MIT AND Unicode-DFS-2016 AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND (MIT OR Zlib OR Apache-2.0) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: bc74850de3edd8bd9623e57227b10792"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/linkdupes@0.7.3-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lua-libs-s390x", "name": "lua-libs", "versionInfo": "5.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/lua-libs-5.5.1-2.1.hum1.s390x.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 7ace7a3ea0a18dfbebe513dcd0fd92d3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lua-libs@5.5.1-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lua-srpm-macros-s390x", "name": "lua-srpm-macros", "versionInfo": "1-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/lua-srpm-macros-1-18.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 68293f00751e1bc423b0bb2ac4e21221"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lua-srpm-macros@1-18.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lz4-libs-s390x", "name": "lz4-libs", "versionInfo": "1.10.0-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/lz4-libs-1.10.0-5.1.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-or-later AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: c5e182e1b1badbfacae862d39241e7bd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lz4-libs@1.10.0-5.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-make-s390x", "name": "make", "versionInfo": "1:4.4.1-13.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/m/make-4.4.1-13.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND GFDL-1.3-or-later AND FSFULLR", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: ae6b3fc3315c06929f5b817212fac215"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/make@4.4.1-13.1.hum1?arch=s390x&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-meson-srpm-macros-s390x", "name": "meson-srpm-macros", "versionInfo": "1.12.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/m/meson-srpm-macros-1.12.1-2.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 7617c98560a327b943961c400248f04b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/meson-srpm-macros@1.12.1-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-mpdecimal-s390x", "name": "mpdecimal", "versionInfo": "4.0.1-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/m/mpdecimal-4.0.1-4.1.hum1.s390x.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: e761ecb4256b8813aed551523066abed"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/mpdecimal@4.0.1-4.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-mpfr-s390x", "name": "mpfr", "versionInfo": "4.2.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/m/mpfr-4.2.2-4.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: d28d4cb6e1defa71fd6b17a0d945accf"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/mpfr@4.2.2-4.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ncurses-base-s390x", "name": "ncurses-base", "versionInfo": "6.6-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/n/ncurses-base-6.6-3.1.hum1.noarch.rpm", "licenseDeclared": "MIT-open-group", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: a90d36a4f9603dffe4896cbc1c4c42c0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ncurses-base@6.6-3.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ncurses-libs-s390x", "name": "ncurses-libs", "versionInfo": "6.6-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/n/ncurses-libs-6.6-3.1.hum1.s390x.rpm", "licenseDeclared": "MIT-open-group", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 44c15d427cdc441e17793d8861c7fbcb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ncurses-libs@6.6-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-nettle-s390x", "name": "nettle", "versionInfo": "4.0-5.5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/n/nettle-4.0-5.5.hum1.s390x.rpm", "licenseDeclared": "LGPL-3.0-or-later OR GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 8431f7529e7509272936ea0226303a9b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/nettle@4.0-5.5.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ngtcp2-crypto-ossl-s390x", "name": "ngtcp2-crypto-ossl", "versionInfo": "1.22.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/n/ngtcp2-crypto-ossl-1.22.1-3.1.hum1.s390x.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 99da38ce162d9f06ee77852585011a58"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ngtcp2-crypto-ossl@1.22.1-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ngtcp2-s390x", "name": "ngtcp2", "versionInfo": "1.22.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/n/ngtcp2-1.22.1-3.1.hum1.s390x.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 6b2a694f6b84034640dd546dbf12d430"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ngtcp2@1.22.1-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-npth-s390x", "name": "npth", "versionInfo": "1.8-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/n/npth-1.8-5.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: fc87bebb4c17d7b4d0a29da58a700725"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/npth@1.8-5.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ocaml-srpm-macros-s390x", "name": "ocaml-srpm-macros", "versionInfo": "11-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/o/ocaml-srpm-macros-11-4.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 6d563b597c552c5ce842bdd83b6d8dd1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ocaml-srpm-macros@11-4.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openblas-srpm-macros-s390x", "name": "openblas-srpm-macros", "versionInfo": "2-23.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/o/openblas-srpm-macros-2-23.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: bf3a7ebbd05d3c09e9712e957b99d3b5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openblas-srpm-macros@2-23.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openldap-s390x", "name": "openldap", "versionInfo": "2.6.15-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/o/openldap-2.6.15-1.1.hum1.s390x.rpm", "licenseDeclared": "OLDAP-2.8", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: e255cdc3b91df628373758b223fe3454"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openldap@2.6.15-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssl-fips-provider-upstream-s390x", "name": "openssl-fips-provider-upstream", "versionInfo": "1:3.5.9-0.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/o/openssl-fips-provider-upstream-3.5.9-0.3.hum1.s390x.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: c970b2cdf7483b9239d16e5c31388dd1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssl-fips-provider-upstream@3.5.9-0.3.hum1?arch=s390x&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssl-libs-s390x", "name": "openssl-libs", "versionInfo": "1:3.5.9-0.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/o/openssl-libs-3.5.9-0.3.hum1.s390x.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 37a8d14c3643586907cf278b82651d42"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssl-libs@3.5.9-0.3.hum1?arch=s390x&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-p11-kit-trust-s390x", "name": "p11-kit-trust", "versionInfo": "0.26.5-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/p11-kit-trust-0.26.5-1.1.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 3ae87eeb33ed8f9e94d75b32bfa1763f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/p11-kit-trust@0.26.5-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-p11-kit-s390x", "name": "p11-kit", "versionInfo": "0.26.5-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/p11-kit-0.26.5-1.1.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 2b92aca4049128081bf8041e53744551"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/p11-kit@0.26.5-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-package-notes-srpm-macros-s390x", "name": "package-notes-srpm-macros", "versionInfo": "0.20-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/package-notes-srpm-macros-0.20-2.hum1.noarch.rpm", "licenseDeclared": "0BSD", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 4f6f48e6009eb2455ec194f477f9b058"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/package-notes-srpm-macros@0.20-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pam-libs-s390x", "name": "pam-libs", "versionInfo": "1.7.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/pam-libs-1.7.2-4.1.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: d493aa4fccfe30eeac848344adb1e973"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pam-libs@1.7.2-4.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-patch-s390x", "name": "patch", "versionInfo": "2.8-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/patch-2.8-6.2.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 83763fc465233583ed914a204f17ca35"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/patch@2.8-6.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-syntax-s390x", "name": "pcre2-syntax", "versionInfo": "10.49-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/pcre2-syntax-10.49-0.2.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 5892ce77122ec3ecfec34fe8679d2737"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2-syntax@10.49-0.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-s390x", "name": "pcre2", "versionInfo": "10.49-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/pcre2-10.49-0.2.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 969d2435bc379b17d80e15a7454b108b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2@10.49-0.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-perl-srpm-macros-s390x", "name": "perl-srpm-macros", "versionInfo": "1-65.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/perl-srpm-macros-1-65.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 0f8b16c4e63430bcff87cb49fa941740"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/perl-srpm-macros@1-65.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-m4-s390x", "name": "pkgconf-m4", "versionInfo": "2.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/pkgconf-m4-2.5.1-2.1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later WITH Autoconf-exception-generic", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 2ee038a201817d6d825292dc25c6b873"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf-m4@2.5.1-2.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-pkg-config-s390x", "name": "pkgconf-pkg-config", "versionInfo": "2.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/pkgconf-pkg-config-2.5.1-2.1.hum1.s390x.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 1d2899e00e34310d47b2b7421b6007e3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf-pkg-config@2.5.1-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-s390x", "name": "pkgconf", "versionInfo": "2.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/pkgconf-2.5.1-2.1.hum1.s390x.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 7ee4fafd972590d96ea9e6bf8752b773"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf@2.5.1-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-policycoreutils-s390x", "name": "policycoreutils", "versionInfo": "3.11-2.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/policycoreutils-3.11-2.3.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 7cd89314b9f5a5bb496f382f69c5bc1b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/policycoreutils@3.11-2.3.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-popt-s390x", "name": "popt", "versionInfo": "1.19-11.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/popt-1.19-11.2.hum1.s390x.rpm", "licenseDeclared": "MIT AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 554f50854a7348f8f82ef61572328c5a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/popt@1.19-11.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-publicsuffix-list-dafsa-s390x", "name": "publicsuffix-list-dafsa", "versionInfo": "20260624-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/publicsuffix-list-dafsa-20260624-2.1.hum1.noarch.rpm", "licenseDeclared": "MPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 258b22e06326223e99678d8138bba57d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/publicsuffix-list-dafsa@20260624-2.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pyproject-srpm-macros-s390x", "name": "pyproject-srpm-macros", "versionInfo": "1.23.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/pyproject-srpm-macros-1.23.2-1.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: e82edc55e5be2f520af44c2b0337e92a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pyproject-srpm-macros@1.23.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python-pip-wheel-s390x", "name": "python-pip-wheel", "versionInfo": "26.2-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/python-pip-wheel-26.2-0.2.hum1.noarch.rpm", "licenseDeclared": "MIT AND Python-2.0.1 AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MPL-2.0 AND (Apache-2.0 OR BSD-2-Clause)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 30b1136e6baf2dc70c7e01a45cf96050"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python-pip-wheel@26.2-0.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python-srpm-macros-s390x", "name": "python-srpm-macros", "versionInfo": "3.14-12.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/python-srpm-macros-3.14-12.2.hum1.noarch.rpm", "licenseDeclared": "MIT AND PSF-2.0 AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 618d0c006548a702f22df8ec49dca3a5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python-srpm-macros@3.14-12.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-boolean.py-s390x", "name": "python3-boolean.py", "versionInfo": "5.0-10.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora-secondary/releases/44/Everything/s390x/os/Packages/p/python3-boolean.py-5.0-10.fc44.noarch.rpm", "licenseDeclared": "NOASSERTION", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: b7af00dcc3668fd56d3b09f1f1b171a9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-boolean.py@5.0-10.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-libs-s390x", "name": "python3-libs", "versionInfo": "3.14.8-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/python3-libs-3.14.8-1.1.hum1.s390x.rpm", "licenseDeclared": "Python-2.0.1 AND MIT AND BSD-3-Clause AND MIT-CMU AND HPND-SMC AND BSD-2-Clause AND dtoa AND Unicode-3.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 6f8a07d52c73aedd90eaf17e9963afb0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-libs@3.14.8-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-license-expression-s390x", "name": "python3-license-expression", "versionInfo": "30.4.4-4.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora-secondary/releases/44/Everything/s390x/os/Packages/p/python3-license-expression-30.4.4-4.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 009ffab3cc792b96ce398d6c97aa5a0a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-license-expression@30.4.4-4.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-s390x", "name": "python3", "versionInfo": "3.14.8-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/python3-3.14.8-1.1.hum1.s390x.rpm", "licenseDeclared": "Python-2.0.1", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 8329d32d747dd00a85a694e1d852200f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3@3.14.8-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-qt5-srpm-macros-s390x", "name": "qt5-srpm-macros", "versionInfo": "5.15.18-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/q/qt5-srpm-macros-5.15.18-3.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 4ffb52b3bdf4017e6c58f49b621e1c54"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/qt5-srpm-macros@5.15.18-3.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-qt6-srpm-macros-s390x", "name": "qt6-srpm-macros", "versionInfo": "6.11.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/q/qt6-srpm-macros-6.11.2-1.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 8478ebf3654d031de2c0964fb1f5d8a2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/qt6-srpm-macros@6.11.2-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-readline-s390x", "name": "readline", "versionInfo": "8.3-7.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/r/readline-8.3-7.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: a70c027f9fb815d87b68a1f88b0fb488"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/readline@8.3-7.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-redhat-rpm-config-s390x", "name": "redhat-rpm-config", "versionInfo": "345-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/r/redhat-rpm-config-345-4.hum1.noarch.rpm", "licenseDeclared": "GPL-1.0-or-later AND GPL-2.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 9e9b9de801d40d8b16d77058da82cde9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/redhat-rpm-config@345-4.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-build-libs-s390x", "name": "rpm-build-libs", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/r/rpm-build-libs-6.1.0-1.2.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 5f2088971269dd65910342236bbcd087"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-build-libs@6.1.0-1.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-build-s390x", "name": "rpm-build", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/r/rpm-build-6.1.0-1.2.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 6545ce3e22b19ae3faa5e35c87cb323a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-build@6.1.0-1.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-libs-s390x", "name": "rpm-libs", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/r/rpm-libs-6.1.0-1.2.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 71f9d1092ecb70ce1080123c49e1d560"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-libs@6.1.0-1.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-plugin-selinux-s390x", "name": "rpm-plugin-selinux", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/r/rpm-plugin-selinux-6.1.0-1.2.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 89f628bbfaa752a6d7a217a1b9cb49a1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-plugin-selinux@6.1.0-1.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-sequoia-s390x", "name": "rpm-sequoia", "versionInfo": "1.10.1.1-1.5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/r/rpm-sequoia-1.10.1.1-1.5.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.0-or-later AND Apache-2.0 AND BSL-1.0 AND MIT AND Unicode-DFS-2016 AND (Apache-2.0 OR MIT) AND (MIT OR Apache-2.0 OR Zlib) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 228a62227d7dd60cd6a935f4a4f08567"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-sequoia@1.10.1.1-1.5.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-sign-libs-s390x", "name": "rpm-sign-libs", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/r/rpm-sign-libs-6.1.0-1.2.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: afdc299a6da2e389cb249d5c263772cd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-sign-libs@6.1.0-1.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-s390x", "name": "rpm", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/r/rpm-6.1.0-1.2.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 9378d50306221b24d269df7fee547c98"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm@6.1.0-1.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rust-srpm-macros-s390x", "name": "rust-srpm-macros", "versionInfo": "28.5-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/r/rust-srpm-macros-28.5-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 606a7a2166723ba0e3515fa8244596dc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rust-srpm-macros@28.5-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sed-s390x", "name": "sed", "versionInfo": "4.10-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/s/sed-4.10-2.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 67cda685cb70b3748edada0ba481db24"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sed@4.10-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-selinux-policy-targeted-s390x", "name": "selinux-policy-targeted", "versionInfo": "45.21-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/s/selinux-policy-targeted-45.21-1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: afd3a0e6066718b6633918ff5031c1ce"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/selinux-policy-targeted@45.21-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-selinux-policy-s390x", "name": "selinux-policy", "versionInfo": "45.21-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/s/selinux-policy-45.21-1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 910958d9c5c1913d447a1e64fb0ad0b6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/selinux-policy@45.21-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-setup-s390x", "name": "setup", "versionInfo": "2.15.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/s/setup-2.15.1-2.1.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 7306efa4649c49f3d249269ae6781e58"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/setup@2.15.1-2.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-shadow-utils-s390x", "name": "shadow-utils", "versionInfo": "2:4.20.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/s/shadow-utils-4.20.0-1.1.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 44d5607c139bd8e95d56bb76b39f25a3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/shadow-utils@4.20.0-1.1.hum1?arch=s390x&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sqlite-libs-s390x", "name": "sqlite-libs", "versionInfo": "3.54.0-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/s/sqlite-libs-3.54.0-0.1.hum1.s390x.rpm", "licenseDeclared": "blessing", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 1b85545bd9788c0a3344e71b57eab92b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sqlite-libs@3.54.0-0.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-libs-s390x", "name": "systemd-libs", "versionInfo": "261.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/s/systemd-libs-261.2-1.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 14d7c8a2c8d2cc685ec1cc68ec48f362"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-libs@261.2-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-standalone-sysusers-s390x", "name": "systemd-standalone-sysusers", "versionInfo": "261.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/s/systemd-standalone-sysusers-261.2-1.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: fc09344446758e6866599a31399d3bf6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-standalone-sysusers@261.2-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tar-s390x", "name": "tar", "versionInfo": "2:1.35-10.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/t/tar-1.35-10.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: d20eece15535d831172af71cb77a0e0b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tar@1.35-10.1.hum1?arch=s390x&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tpm2-tss-s390x", "name": "tpm2-tss", "versionInfo": "4.2.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/t/tpm2-tss-4.2.0-1.1.hum1.s390x.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 4bcba63ab39f593aa7e78024866aa12a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tpm2-tss@4.2.0-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tree-sitter-srpm-macros-s390x", "name": "tree-sitter-srpm-macros", "versionInfo": "0.4.6-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/t/tree-sitter-srpm-macros-0.4.6-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: f65af17df28df341ec383338fcc47481"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tree-sitter-srpm-macros@0.4.6-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tzdata-s390x", "name": "tzdata", "versionInfo": "2026e-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/t/tzdata-2026e-1.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain AND (GPL-2.0-only WITH ClassPath-exception-2.0)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: a1336045dee9a14e5ecb98f2e75ca023"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tzdata@2026e-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-unzip-s390x", "name": "unzip", "versionInfo": "6.0-71.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/u/unzip-6.0-71.1.hum1.s390x.rpm", "licenseDeclared": "Info-ZIP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 720c2a47a1797b3214555554c2a79ef4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/unzip@6.0-71.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-util-linux-core-s390x", "name": "util-linux-core", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/u/util-linux-core-2.42.4-2.1.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 81ead8c15499d8e676405f12bae9face"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/util-linux-core@2.42.4-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-util-linux-s390x", "name": "util-linux", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/u/util-linux-2.42.4-2.1.hum1.s390x.rpm", "licenseDeclared": "GPL-1.0-or-later AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: da08fb9caf18b27ad4cd85f3492e9c9b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/util-linux@2.42.4-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-which-s390x", "name": "which", "versionInfo": "2.25-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/w/which-2.25-2.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 3faab74931530d51d59f9962eae4497b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/which@2.25-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xxhash-libs-s390x", "name": "xxhash-libs", "versionInfo": "0.8.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/x/xxhash-libs-0.8.4-1.1.hum1.s390x.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: ce696abcca56a465f23950d9d2b33ec8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xxhash-libs@0.8.4-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xz-libs-s390x", "name": "xz-libs", "versionInfo": "1:5.8.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/x/xz-libs-5.8.4-1.1.hum1.s390x.rpm", "licenseDeclared": "0BSD", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: dc5c19c8e60d04be2ff9e2f05b78bd2d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xz-libs@5.8.4-1.1.hum1?arch=s390x&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xz-s390x", "name": "xz", "versionInfo": "1:5.8.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/x/xz-5.8.4-1.1.hum1.s390x.rpm", "licenseDeclared": "0BSD AND GPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 766bb2c2f42616c8be4d5353b1827d69"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xz@5.8.4-1.1.hum1?arch=s390x&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zig-srpm-macros-s390x", "name": "zig-srpm-macros", "versionInfo": "1-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/z/zig-srpm-macros-1-9.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 0c226eb1fa4d5fc3d272055b6397b077"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zig-srpm-macros@1-9.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zip-s390x", "name": "zip", "versionInfo": "3.0-46.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/z/zip-3.0-46.1.hum1.s390x.rpm", "licenseDeclared": "Info-ZIP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: dabbcab97059c98ec49498b32e779b01"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zip@3.0-46.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zlib-ng-compat-s390x", "name": "zlib-ng-compat", "versionInfo": "2.3.3-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/z/zlib-ng-compat-2.3.3-6.1.hum1.s390x.rpm", "licenseDeclared": "Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: ccb3116e066283f3ac05000db321a028"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zlib-ng-compat@2.3.3-6.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zstd-s390x", "name": "zstd", "versionInfo": "1.5.7-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/z/zstd-1.5.7-6.2.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 3344acb0ce44f331ff2d587cab1596a7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zstd@1.5.7-6.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-grype-x86-64", "name": "grype-buildroot-x86_64", "versionInfo": "77531cad", "downloadLocation": "NOASSERTION", "filesAnalyzed": false}, {"SPDXID": "SPDXRef-Buildroot-Package-R-srpm-macros-x86-64", "name": "R-srpm-macros", "versionInfo": "1.3.7-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/R-srpm-macros-1.3.7-3.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: af95299e83e51b62a40fa7a42d357077"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/R-srpm-macros@1.3.7-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-add-determinism-x86-64", "name": "add-determinism", "versionInfo": "0.7.3-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/add-determinism-0.7.3-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND MIT AND Unicode-DFS-2016 AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 OR MIT) AND (Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND (MIT OR Zlib OR Apache-2.0) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 02acf5d1809fd4e81f704e1d95ed7b89"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/add-determinism@0.7.3-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-alternatives-x86-64", "name": "alternatives", "versionInfo": "1.33-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/alternatives-1.33-6.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 5eb4df30f945eef277e2acb1c5b781e6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/alternatives@1.33-6.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-annobin-docs-x86-64", "name": "annobin-docs", "versionInfo": "13.32-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/annobin-docs-13.32-1.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND GFDL-1.3-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 18d60a72e7a0be13693c92c6e0d885c9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/annobin-docs@13.32-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-annobin-plugin-gcc-x86-64", "name": "annobin-plugin-gcc", "versionInfo": "13.32-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/annobin-plugin-gcc-13.32-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND GFDL-1.3-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: d91069c827cea6f3d733bf2670282118"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/annobin-plugin-gcc@13.32-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ansible-srpm-macros-x86-64", "name": "ansible-srpm-macros", "versionInfo": "1-22.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/ansible-srpm-macros-1-22.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 6343ff368e5236625d015dbc91e70769"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ansible-srpm-macros@1-22.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-askalono-cli-x86-64", "name": "askalono-cli", "versionInfo": "0.5.0-4.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/a/askalono-cli-0.5.0-4.fc44.x86_64.rpm", "licenseDeclared": "Apache-2.0 AND CC0-1.0 AND MIT AND Unicode-DFS-2016 AND (Apache-2.0 OR BSL-1.0) AND (Apache-2.0 OR MIT) AND (MIT OR Apache-2.0 OR Zlib) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 02a05ce513bee7180cb21f5cd846f783"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/askalono-cli@0.5.0-4.fc44?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-audit-libs-x86-64", "name": "audit-libs", "versionInfo": "4.2.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/audit-libs-4.2.1-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: ec3ac4d4c3901cbd76eb9447ca97e720"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/audit-libs@4.2.1-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bash-x86-64", "name": "bash", "versionInfo": "5.3.20-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/bash-5.3.20-1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 86fbd5cdc1fc9f73c5a80a184759cf26"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bash@5.3.20-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-binutils-x86-64", "name": "binutils", "versionInfo": "2.46.1-1.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/binutils-2.46.1-1.3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-3.0-or-later WITH Bison-exception-2.2) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND BSD-3-Clause AND GFDL-1.3-or-later AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 0cb0be3177bcc257fc8f1326ec6f3142"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/binutils@2.46.1-1.3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-build-reproducibility-srpm-macros-x86-64", "name": "build-reproducibility-srpm-macros", "versionInfo": "0.7.3-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/build-reproducibility-srpm-macros-0.7.3-3.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 4dea8bdbe97b4534f60d8a6d0b9c793c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/build-reproducibility-srpm-macros@0.7.3-3.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bzip2-libs-x86-64", "name": "bzip2-libs", "versionInfo": "1.0.8-24.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/bzip2-libs-1.0.8-24.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-4-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 3d0299d5f7edb1ddf3d7737a8b344bca"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bzip2-libs@1.0.8-24.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bzip2-x86-64", "name": "bzip2", "versionInfo": "1.0.8-24.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/bzip2-1.0.8-24.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-4-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 25ceddb521c14cc7bc826c0ec6640adc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bzip2@1.0.8-24.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ca-certificates-x86-64", "name": "ca-certificates", "versionInfo": "2026.2.90_v9.0.317-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/ca-certificates-2026.2.90_v9.0.317-1.1.hum1.noarch.rpm", "licenseDeclared": "MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: a195cd97c3daf258791a89c2b5af39d2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ca-certificates@2026.2.90_v9.0.317-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cmake-srpm-macros-x86-64", "name": "cmake-srpm-macros", "versionInfo": "4.3.0-5.6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/cmake-srpm-macros-4.3.0-5.6.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND MIT-open-group AND Zlib AND Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: e2f14e03350d92477884a522df888c53"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cmake-srpm-macros@4.3.0-5.6.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-coreutils-common-x86-64", "name": "coreutils-common", "versionInfo": "9.12-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/coreutils-common-9.12-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-no-invariants-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 07e605a0b418cccac841adc20aa4ba1c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/coreutils-common@9.12-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-coreutils-x86-64", "name": "coreutils", "versionInfo": "9.12-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/coreutils-9.12-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-no-invariants-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: ebcb432638b4811a1b7f8f89f4aff370"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/coreutils@9.12-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cpio-x86-64", "name": "cpio", "versionInfo": "2.15-10.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/cpio-2.15-10.2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 464bcd9ea807329681bc82904f3c89ca"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cpio@2.15-10.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cpp-x86-64", "name": "cpp", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/cpp-16.2.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 6155d5751aec01ed71d09c9f8e94551e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cpp@16.2.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-crypto-policies-config-default-x86-64", "name": "crypto-policies-config-default", "versionInfo": "20260812-1.git359ab16.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/crypto-policies-config-default-20260812-1.git359ab16.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 1e6fce169a2973e4f665428cb52ae9ad"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/crypto-policies-config-default@20260812-1.git359ab16.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-crypto-policies-x86-64", "name": "crypto-policies", "versionInfo": "20260812-1.git359ab16.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/crypto-policies-20260812-1.git359ab16.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 9756d9b800cfeafa3f39e494328a620e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/crypto-policies@20260812-1.git359ab16.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-curl-x86-64", "name": "curl", "versionInfo": "8.22.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/curl-8.22.0-1.1.hum1.x86_64.rpm", "licenseDeclared": "curl", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 780e451ae2b4d6a094306b9aaa666887"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/curl@8.22.0-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cyrus-sasl-lib-x86-64", "name": "cyrus-sasl-lib", "versionInfo": "2.1.28-37.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/cyrus-sasl-lib-2.1.28-37.2.hum1.x86_64.rpm", "licenseDeclared": "BSD-Attribution-HPND-disclaimer", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 7010d12ef8d1784c80154ffb153fba63"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cyrus-sasl-lib@2.1.28-37.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-debugedit-x86-64", "name": "debugedit", "versionInfo": "5.3-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/d/debugedit-5.3-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 2ce506d8cc0cffd0a8e4d0c5f0f936d6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/debugedit@5.3-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-diffutils-x86-64", "name": "diffutils", "versionInfo": "3.12-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/d/diffutils-3.12-6.2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 8c6951e4fcdf1695f6eb9e6ef74730c8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/diffutils@3.12-6.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-dwz-x86-64", "name": "dwz", "versionInfo": "0.17-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/d/dwz-0.17-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND GPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 9c4561353d076cd4b1556d806d46c8c4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/dwz@0.17-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ed-x86-64", "name": "ed", "versionInfo": "1.22.6-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/ed-1.22.6-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-only AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: a4e85b35383423885ebd21b77bba6170"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ed@1.22.6-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-efi-srpm-macros-x86-64", "name": "efi-srpm-macros", "versionInfo": "6-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/efi-srpm-macros-6-9.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: cba49c2554beb37df9cc6bb744737e2b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/efi-srpm-macros@6-9.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-debuginfod-client-x86-64", "name": "elfutils-debuginfod-client", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/elfutils-debuginfod-client-0.196-1.1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-2.0-or-later OR LGPL-3.0-or-later)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: c6950ee47cabdbb447dd12e8f11ce2ec"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-debuginfod-client@0.196-1.1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-libelf-x86-64", "name": "elfutils-libelf", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/elfutils-libelf-0.196-1.1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 5fdb83b704a22368baf3ebd09ce19139"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-libelf@0.196-1.1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-libs-x86-64", "name": "elfutils-libs", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/elfutils-libs-0.196-1.1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: e1794cbfac97b414417c7c242229bf1c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-libs@0.196-1.1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-x86-64", "name": "elfutils", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/elfutils-0.196-1.1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-2.0-or-later OR LGPL-3.0-or-later) AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 085e3d859dfa30b810917353c33e9feb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils@0.196-1.1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-erlang-srpm-macros-x86-64", "name": "erlang-srpm-macros", "versionInfo": "0.3.11-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/erlang-srpm-macros-0.3.11-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 063020bc2b254fec865c06f313930cec"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/erlang-srpm-macros@0.3.11-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-expat-x86-64", "name": "expat", "versionInfo": "2.8.5-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/expat-2.8.5-1.2.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 0c5cbf6236a08bc929ff502c28ef9da1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/expat@2.8.5-1.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-file-libs-x86-64", "name": "file-libs", "versionInfo": "5.48-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/file-libs-5.48-3.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause-Darwin AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 693d8445c4e52df1e5fad8a746e3089b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/file-libs@5.48-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-filesystem-srpm-macros-x86-64", "name": "filesystem-srpm-macros", "versionInfo": "3.18-59.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/filesystem-srpm-macros-3.18-59.1.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: cff1a42588f4eb1a758735b668069a67"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/filesystem-srpm-macros@3.18-59.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-filesystem-x86-64", "name": "filesystem", "versionInfo": "3.18-59.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/filesystem-3.18-59.1.hum1.x86_64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: a736f1c0487b505dd6c16ceaaeb3f0a4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/filesystem@3.18-59.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-file-x86-64", "name": "file", "versionInfo": "5.48-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/file-5.48-3.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause-Darwin AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: fc18ee9b195bb0bef239935848f36eb0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/file@5.48-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-findutils-x86-64", "name": "findutils", "versionInfo": "1:4.11.0-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/findutils-4.11.0-2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: a6ab9adb99798fd43e71b67daa2fe8b8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/findutils@4.11.0-2.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-fonts-srpm-macros-x86-64", "name": "fonts-srpm-macros", "versionInfo": "1:5.0.0-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/fonts-srpm-macros-5.0.0-4.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 72e451571f24737949a256d091508d0c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/fonts-srpm-macros@5.0.0-4.hum1?arch=noarch&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-forge-srpm-macros-x86-64", "name": "forge-srpm-macros", "versionInfo": "0.4.0-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/forge-srpm-macros-0.4.0-5.hum1.noarch.rpm", "licenseDeclared": "GPL-1.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: bfbed65969ec708556df3750591a377d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/forge-srpm-macros@0.4.0-5.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-fpc-srpm-macros-x86-64", "name": "fpc-srpm-macros", "versionInfo": "1.3-17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/fpc-srpm-macros-1.3-17.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 1f7e4cb902ccc37236f8d34ff8873cf2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/fpc-srpm-macros@1.3-17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gap-srpm-macros-x86-64", "name": "gap-srpm-macros", "versionInfo": "2-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gap-srpm-macros-2-3.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 70e3423696085d13791fefc0be7cdf15"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gap-srpm-macros@2-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gawk-x86-64", "name": "gawk", "versionInfo": "5.4.1-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gawk-5.4.1-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: cfea5a78989dd66244218dbc0c6c0ba4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gawk@5.4.1-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gcc-plugin-annobin-x86-64", "name": "gcc-plugin-annobin", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gcc-plugin-annobin-16.2.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: f2b83ae39c4c6509f801b0c8b2dd22b6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gcc-plugin-annobin@16.2.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gcc-x86-64", "name": "gcc", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gcc-16.2.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: f9ac343d0c30d96195e02f2b54883446"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gcc@16.2.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gdb-minimal-x86-64", "name": "gdb-minimal", "versionInfo": "17.2-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gdb-minimal-17.2-6.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND BSD-3-Clause AND FSFAP AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain AND GFDL-1.3-or-later AND LGPL-2.0-or-later WITH GCC-exception-2.0 AND GPL-3.0-or-later WITH GCC-exception-3.1 AND GPL-2.0-or-later WITH GNU-compiler-exception AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: eecc3642be0c160e16f5cf1569b8f3fd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gdb-minimal@17.2-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gdbm-libs-x86-64", "name": "gdbm-libs", "versionInfo": "1:1.26-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gdbm-libs-1.26-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 1d2adcfbc7a8c3d3e29e56db4d441037"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gdbm-libs@1.26-1.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ghc-srpm-macros-x86-64", "name": "ghc-srpm-macros", "versionInfo": "1.10-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/ghc-srpm-macros-1.10-2.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: c59363c566e4f370953f5f4b048e594e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ghc-srpm-macros@1.10-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-common-x86-64", "name": "glibc-common", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-common-2.43-9.2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 9eab516d0f80b295960361b63b319245"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-common@2.43-9.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-devel-x86-64", "name": "glibc-devel", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-devel-2.43-9.2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 4ab96fa4ca1a669a0d850091bdd89486"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-devel@2.43-9.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-gconv-extra-x86-64", "name": "glibc-gconv-extra", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-gconv-extra-2.43-9.2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: eaeef60b7dbad9934cccc55d1dd62c80"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-gconv-extra@2.43-9.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-minimal-langpack-x86-64", "name": "glibc-minimal-langpack", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-minimal-langpack-2.43-9.2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 9d9998236922ccfdf80f9cbfa061931a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-minimal-langpack@2.43-9.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-x86-64", "name": "glibc", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-2.43-9.2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 41c73a734782d852fc7481d7fbd4130a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc@2.43-9.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gmp-x86-64", "name": "gmp", "versionInfo": "1:6.3.0-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gmp-6.3.0-6.1.hum1.x86_64.rpm", "licenseDeclared": "(LGPL-3.0-or-later OR GPL-2.0-or-later OR (LGPL-3.0-or-later AND GPL-2.0-or-later)) AND GFDL-1.3-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 2c7e7fb43e049cf045044f4d5bcf6fb1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gmp@6.3.0-6.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnat-srpm-macros-x86-64", "name": "gnat-srpm-macros", "versionInfo": "7-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnat-srpm-macros-7-3.hum1.noarch.rpm", "licenseDeclared": "FSFAP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 66efb6ab04e5e1a84478a688e2f149a3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnat-srpm-macros@7-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnome-srpm-macros-x86-64", "name": "gnome-srpm-macros", "versionInfo": "1.0-1.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/updates/44/Everything/x86_64/Packages/g/gnome-srpm-macros-1.0-1.fc44.noarch.rpm", "licenseDeclared": "Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 2bbaa6afcb861d76b0036e4b5bf9b3be"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnome-srpm-macros@1.0-1.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnulib-l10n-x86-64", "name": "gnulib-l10n", "versionInfo": "20241231-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnulib-l10n-20241231-4.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 5628836ab4d4e824bcadb20d87a01a33"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnulib-l10n@20241231-4.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-dirmngr-x86-64", "name": "gnupg2-dirmngr", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-dirmngr-2.4.9-18.2.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 64faf73544d16702ac4caeaed331a9de"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-dirmngr@2.4.9-18.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-gpg-agent-x86-64", "name": "gnupg2-gpg-agent", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-gpg-agent-2.4.9-18.2.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 9546299c3fa6e253822bbb48b47564a9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-gpg-agent@2.4.9-18.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-gpgconf-x86-64", "name": "gnupg2-gpgconf", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-gpgconf-2.4.9-18.2.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 017d50061482f5af2a52687e6bfeeded"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-gpgconf@2.4.9-18.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-keyboxd-x86-64", "name": "gnupg2-keyboxd", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-keyboxd-2.4.9-18.2.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: bb774c82d733bb4b5bcacbcfcc136a0d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-keyboxd@2.4.9-18.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-verify-x86-64", "name": "gnupg2-verify", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-verify-2.4.9-18.2.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 0b9ed17086f9631984af7ad0b65ed7be"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-verify@2.4.9-18.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-x86-64", "name": "gnupg2", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-2.4.9-18.2.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 8ed8d266f88c4e5d1ddc093f83220a2b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2@2.4.9-18.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnutls-x86-64", "name": "gnutls", "versionInfo": "3.8.13-5.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnutls-3.8.13-5.2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: dfbbb8930398b4570e1f04b3cecbce3d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnutls@3.8.13-5.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-filesystem-x86-64", "name": "go-filesystem", "versionInfo": "3.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/go-filesystem-3.8.0-3.hum1.x86_64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: b7ba053e6fc52967827728a4a06c6592"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-filesystem@3.8.0-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-rpm-macros-x86-64", "name": "go-rpm-macros", "versionInfo": "3.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/go-rpm-macros-3.8.0-3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 9ee7b1a24cd488ecf4304dfe6dbedc8f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-rpm-macros@3.8.0-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-srpm-macros-x86-64", "name": "go-srpm-macros", "versionInfo": "3.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/go-srpm-macros-3.8.0-3.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 58fd7d8eb056ce7d09e3ba375de1effc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-srpm-macros@3.8.0-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-vendor-tools-x86-64", "name": "go-vendor-tools", "versionInfo": "0.12.0-1.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/updates/44/Everything/x86_64/Packages/g/go-vendor-tools-0.12.0-1.fc44.noarch.rpm", "licenseDeclared": "MIT AND BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 7c4ed6389413dbed713121b1168f24da"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-vendor-tools@0.12.0-1.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-bin-x86-64", "name": "golang1.27-bin", "versionInfo": "1.27.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/golang1.27-bin-1.27.2-1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 84db6ae4111d3f6c9e8df671e8262bfb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27-bin@1.27.2-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-src-x86-64", "name": "golang1.27-src", "versionInfo": "1.27.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/golang1.27-src-1.27.2-1.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: f40c9e87cab011209fed012b75f85d64"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27-src@1.27.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-x86-64", "name": "golang1.27", "versionInfo": "1.27.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/golang1.27-1.27.2-1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 1eee2e5d533071fcc5026d61d8a8babd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27@1.27.2-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golist-x86-64", "name": "golist", "versionInfo": "0.11.0-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/golist-0.11.0-2.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause AND BSD-3-Clause AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: c94866cb8a1c5c8a4f2192fce2ae701f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golist@0.11.0-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gpgverify-x86-64", "name": "gpgverify", "versionInfo": "2.2-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gpgverify-2.2-5.hum1.noarch.rpm", "licenseDeclared": "Boehm-GC", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 9637bdca60814388d4c5b144d923e6d4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gpgverify@2.2-5.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-grep-x86-64", "name": "grep", "versionInfo": "3.12-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/grep-3.12-4.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 30caafcf9e86d9e314469049d27a486b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/grep@3.12-4.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gzip-x86-64", "name": "gzip", "versionInfo": "1.15-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gzip-1.15-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 5a6149f1ac63b8ec9f2138279c7f179b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gzip@1.15-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-gpg-keys-x86-64", "name": "hummingbird-gpg-keys", "versionInfo": "20251124-1.17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/h/hummingbird-gpg-keys-20251124-1.17.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 01a73721cc0ecdcb5d9f3929f6777157"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-gpg-keys@20251124-1.17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-release-x86-64", "name": "hummingbird-release", "versionInfo": "20251124-1.17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/h/hummingbird-release-20251124-1.17.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: d1c993eba75002797ea72c3cd1266853"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-release@20251124-1.17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-repos-x86-64", "name": "hummingbird-repos", "versionInfo": "20251124-1.17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/h/hummingbird-repos-20251124-1.17.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 1704eb0434ddab68e1c756070246f576"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-repos@20251124-1.17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ima-evm-utils-libs-x86-64", "name": "ima-evm-utils-libs", "versionInfo": "1.6.2-12.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/i/ima-evm-utils-libs-1.6.2-12.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 3f7e9a8fa123cd5e5ea89cf63473c45e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ima-evm-utils-libs@1.6.2-12.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-info-x86-64", "name": "info", "versionInfo": "7.2-9.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/i/info-7.2-9.fc44.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 7cd06c9116234e26a968b1c2ff5be47d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/info@7.2-9.fc44?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-jansson-x86-64", "name": "jansson", "versionInfo": "2.14-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/jansson-2.14-5.1.hum1.x86_64.rpm", "licenseDeclared": "MIT AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: c1e4d44f64c047944dc31b1692a1e5b1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/jansson@2.14-5.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-java-srpm-macros-x86-64", "name": "java-srpm-macros", "versionInfo": "1-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/java-srpm-macros-1-9.hum1.noarch.rpm", "licenseDeclared": "MIT-0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 367fafb59cbd6a02034ba8bafdafe9c9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/java-srpm-macros@1-9.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-json-c-x86-64", "name": "json-c", "versionInfo": "0.18-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/json-c-0.18-9.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 6fec8b09fc93d23dba88f03b024fb073"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/json-c@0.18-9.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-kernel-headers-x86-64", "name": "kernel-headers", "versionInfo": "7.2.0-61.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/k/kernel-headers-7.2.0-61.1.hum1.x86_64.rpm", "licenseDeclared": "((GPL-2.0-only WITH Linux-syscall-note) OR BSD-2-Clause) AND ((GPL-2.0-only WITH Linux-syscall-note) OR BSD-3-Clause) AND ((GPL-2.0-only WITH Linux-syscall-note) OR CDDL-1.0) AND ((GPL-2.0-only WITH Linux-syscall-note) OR Linux-OpenIB) AND ((GPL-2.0-only WITH Linux-syscall-note) OR MIT) AND ((GPL-2.0-or-later WITH Linux-syscall-note) OR BSD-3-Clause) AND ((GPL-2.0-or-later WITH Linux-syscall-note) OR MIT) AND BSD-3-Clause AND (GPL-1.0-or-later WITH Linux-syscall-note) AND GPL-2.0-only AND (GPL-2.0-only WITH Linux-syscall-note) AND (GPL-2.0-or-later WITH Linux-syscall-note) AND (LGPL-2.0-or-later WITH Linux-syscall-note) AND (LGPL-2.1-only WITH Linux-syscall-note) AND (LGPL-2.1-or-later WITH Linux-syscall-note) AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: aadfdd0580fde87fc9b34360fb82a469"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/kernel-headers@7.2.0-61.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-kernel-srpm-macros-x86-64", "name": "kernel-srpm-macros", "versionInfo": "1.0-30.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/k/kernel-srpm-macros-1.0-30.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: d6fe851b8eed59b0b3ed90411974a3f1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/kernel-srpm-macros@1.0-30.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-keyutils-libs-x86-64", "name": "keyutils-libs", "versionInfo": "1.6.3-8.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/k/keyutils-libs-1.6.3-8.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 83cd2236fb6d56defe7beca1256cca78"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/keyutils-libs@1.6.3-8.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-krb5-libs-x86-64", "name": "krb5-libs", "versionInfo": "1.22.2-10.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/k/krb5-libs-1.22.2-10.3.hum1.x86_64.rpm", "licenseDeclared": "Brian-Gladman-2-Clause AND BSD-2-Clause AND (BSD-2-Clause OR GPL-2.0-or-later) AND BSD-2-Clause-first-lines AND BSD-3-Clause AND BSD-4-Clause AND CMU-Mach-nodoc AND FSFULLRWD AND HPND AND HPND-export2-US AND HPND-export-US AND HPND-export-US-acknowledgement AND HPND-export-US-modify AND ISC AND MIT AND MIT-CMU AND OLDAP-2.8 AND OpenVision", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 545278e10134666a8c291499bac221f1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/krb5-libs@1.22.2-10.3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libacl-x86-64", "name": "libacl", "versionInfo": "2.4.0-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libacl-2.4.0-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 788fb6fac6ab4116feaef2e0300ea57e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libacl@2.4.0-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libarchive-x86-64", "name": "libarchive", "versionInfo": "3.8.9-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libarchive-3.8.9-2.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause AND FSFULLR AND GPL-2.0-or-later WITH Libtool-exception AND BSD-3-Clause AND FSFUL", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: aad0303990bb1b04a5105825aeaf3001"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libarchive@3.8.9-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libassuan-x86-64", "name": "libassuan", "versionInfo": "2.5.7-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libassuan-2.5.7-6.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 059b8af761f036d632500cc22cec31e6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libassuan@2.5.7-6.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libatomic-x86-64", "name": "libatomic", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libatomic-16.2.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 47ab6b5acecd7d6ae9a3eb6615e15c91"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libatomic@16.2.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libattr-x86-64", "name": "libattr", "versionInfo": "2.6.0-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libattr-2.6.0-9.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: d585f6a64162151c857c9401a1cbf3e0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libattr@2.6.0-9.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libblkid-x86-64", "name": "libblkid", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libblkid-2.42.4-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: c88859e9e7d00ebc2e15e6b98baf950d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libblkid@2.42.4-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libbrotli-x86-64", "name": "libbrotli", "versionInfo": "1.2.0-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libbrotli-1.2.0-6.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 85f2f47512d9d8f986fb8a1c04cc5aa6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libbrotli@1.2.0-6.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcap-ng-x86-64", "name": "libcap-ng", "versionInfo": "0.9.6-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcap-ng-0.9.6-1.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 5fd3db66052d3df8f713e523c13a955f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcap-ng@0.9.6-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcap-x86-64", "name": "libcap", "versionInfo": "2.78-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcap-2.78-2.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 67f4e2e447638ef6423ec37215870ea1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcap@2.78-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcbor-x86-64", "name": "libcbor", "versionInfo": "0.14.0-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcbor-0.14.0-3.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 9a33095c506ec5bd6d7c3b525cef087a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcbor@0.14.0-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcom-err-x86-64", "name": "libcom_err", "versionInfo": "1.47.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcom_err-1.47.4-2.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: e24ccc4e4b721fc269fa4ded6adba3be"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcom_err@1.47.4-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcurl-x86-64", "name": "libcurl", "versionInfo": "8.22.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcurl-8.22.0-1.1.hum1.x86_64.rpm", "licenseDeclared": "curl", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 1428e163e746597d1e33a36f58c93680"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcurl@8.22.0-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libeconf-x86-64", "name": "libeconf", "versionInfo": "0.7.9-4.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libeconf-0.7.9-4.2.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 1ccc14f8674aec8c899ee0eeded54f81"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libeconf@0.7.9-4.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libevent-x86-64", "name": "libevent", "versionInfo": "2.1.13-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libevent-2.1.13-1.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND ISC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: f30ba9b3193b576be7b3da4364c75e55"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libevent@2.1.13-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfdisk-x86-64", "name": "libfdisk", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libfdisk-2.42.4-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: bed12a724f795ae4a0f119dd179dd169"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfdisk@2.42.4-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libffi-x86-64", "name": "libffi", "versionInfo": "3.8.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libffi-3.8.0-1.1.hum1.x86_64.rpm", "licenseDeclared": "MIT AND CC-PDDC AND (GPL-3.0-or-later WITH Texinfo-exception)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: bfcd0557f6f7d71f78389a2f255f84ee"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libffi@3.8.0-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfido2-x86-64", "name": "libfido2", "versionInfo": "1.17.0-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libfido2-1.17.0-6.2.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 8b9b7eff333cbda55fa9d7d24667f672"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfido2@1.17.0-6.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfsverity-x86-64", "name": "libfsverity", "versionInfo": "1.7-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libfsverity-1.7-4.1.hum1.x86_64.rpm", "licenseDeclared": "NOASSERTION", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 372c392dc177e9b4587046fed56f0d6e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfsverity@1.7-4.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgcc-x86-64", "name": "libgcc", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libgcc-16.2.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: d9f9b38741e47aa97fa57d4394c05e85"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgcc@16.2.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgcrypt-x86-64", "name": "libgcrypt", "versionInfo": "1.12.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libgcrypt-1.12.4-1.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND (BSD-3-Clause OR GPL-2.0-only) AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later AND MIT-Modern-Variant", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: f4bef4bc6a67ba46ac13e78047c07a4a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgcrypt@1.12.4-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgomp-x86-64", "name": "libgomp", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libgomp-16.2.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 9b500e97526ccc46e490b028b56ed8d7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgomp@16.2.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgpg-error-x86-64", "name": "libgpg-error", "versionInfo": "1.61-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libgpg-error-1.61-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND (BSD-3-Clause OR LGPL-2.1-or-later) AND FSFULLR AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: b47f6024eae245a48d6413e5ea9ddd49"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgpg-error@1.61-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libidn2-x86-64", "name": "libidn2", "versionInfo": "2.3.8-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libidn2-2.3.8-4.1.hum1.x86_64.rpm", "licenseDeclared": "(GPL-2.0-or-later OR LGPL-3.0-or-later) AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 81f930e418fc54a1e008fa2b2ed09873"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libidn2@2.3.8-4.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libksba-x86-64", "name": "libksba", "versionInfo": "1.8.1-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libksba-1.8.1-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND (LGPL-3.0-or-later OR GPL-2.0-or-later)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 791730e4835155fab5a86f2022ad6df6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libksba@1.8.1-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-liblastlog2-x86-64", "name": "liblastlog2", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/liblastlog2-2.42.4-2.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 3cb1e0b98469b5d3d68474923c0d81f9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/liblastlog2@2.42.4-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libmount-x86-64", "name": "libmount", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libmount-2.42.4-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: d37fd9e0844a0a7a78353fbd66fdb31a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libmount@2.42.4-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libmpc-x86-64", "name": "libmpc", "versionInfo": "1.4.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libmpc-1.4.1-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-3.0-or-later AND FSFAP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: c553fb50a9da1707322efd91e91901fc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libmpc@1.4.1-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnghttp2-x86-64", "name": "libnghttp2", "versionInfo": "1.69.0-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libnghttp2-1.69.0-6.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 45fc7389fd2b921540a7531e83c70187"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnghttp2@1.69.0-6.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnghttp3-x86-64", "name": "libnghttp3", "versionInfo": "1.18.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libnghttp3-1.18.0-1.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: d4a67b9f63187cba69ee5cbf3881b097"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnghttp3@1.18.0-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpfm-x86-64", "name": "libpfm", "versionInfo": "4.13.0-20.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/updates/44/Everything/x86_64/Packages/l/libpfm-4.13.0-20.fc44.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 8d3340a34243fe94badf7ab91f89d20c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpfm@4.13.0-20.fc44?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpkgconf-x86-64", "name": "libpkgconf", "versionInfo": "2.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libpkgconf-2.5.1-2.1.hum1.x86_64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: e74fe8ab012b3d507ee094563d5cfc63"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpkgconf@2.5.1-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpsl-x86-64", "name": "libpsl", "versionInfo": "0.23.3-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libpsl-0.23.3-1.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 075540620d092a55ab448679a2415dee"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpsl@0.23.3-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libselinux-utils-x86-64", "name": "libselinux-utils", "versionInfo": "3.11-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libselinux-utils-3.11-5.1.hum1.x86_64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 2a10779a6db7dff145f6ad9849a537dd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libselinux-utils@3.11-5.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libselinux-x86-64", "name": "libselinux", "versionInfo": "3.11-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libselinux-3.11-5.1.hum1.x86_64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: df2dff5bcf4c74661cbdd8c7d8690c9d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libselinux@3.11-5.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsemanage-x86-64", "name": "libsemanage", "versionInfo": "3.11-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libsemanage-3.11-4.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: e315e8f4c05e9ff1a8550c96728143db"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsemanage@3.11-4.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsepol-x86-64", "name": "libsepol", "versionInfo": "3.11-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libsepol-3.11-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 22ccfb73f7b0fa00c7eea35897c331c3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsepol@3.11-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsmartcols-x86-64", "name": "libsmartcols", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libsmartcols-2.42.4-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 04a86365c7c38a3097c848d8a32de300"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsmartcols@2.42.4-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libssh-config-x86-64", "name": "libssh-config", "versionInfo": "0.12.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libssh-config-0.12.2-1.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: f26ba5abb68d2fea08f751a8569faa35"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libssh-config@0.12.2-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libssh-x86-64", "name": "libssh", "versionInfo": "0.12.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libssh-0.12.2-1.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 2a67c00b820489c0075d8475b6764b45"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libssh@0.12.2-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libstdc++-x86-64", "name": "libstdc++", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libstdc++-16.2.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 1d29dc0cf0b01c168d3f6f050c84311c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libstdc++@16.2.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtasn1-x86-64", "name": "libtasn1", "versionInfo": "4.21.0-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libtasn1-4.21.0-2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 1752b9dd0a834fca70607e8dea809765"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtasn1@4.21.0-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtool-ltdl-x86-64", "name": "libtool-ltdl", "versionInfo": "2.6.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libtool-ltdl-2.6.2-1.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later WITH Libtool-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 4ed75e065e82bb447bc9e57a1108063e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtool-ltdl@2.6.2-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libunistring-x86-64", "name": "libunistring", "versionInfo": "1.1-12.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libunistring-1.1-12.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 58d6c066070b8ba39b68b8ce4475d903"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libunistring@1.1-12.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libusb1-x86-64", "name": "libusb1", "versionInfo": "1.0.30-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libusb1-1.0.30-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 3ed4be7f3910f98f9bf6a42d49b5de70"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libusb1@1.0.30-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libuuid-x86-64", "name": "libuuid", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libuuid-2.42.4-2.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 8c9afb13ed8e067848e0d260a5745c86"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libuuid@2.42.4-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libverto-x86-64", "name": "libverto", "versionInfo": "0.3.2-13.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libverto-0.3.2-13.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 5c04a48b08efca2f367581cf22f3ea79"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libverto@0.3.2-13.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxcrypt-devel-x86-64", "name": "libxcrypt-devel", "versionInfo": "4.5.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libxcrypt-devel-4.5.2-4.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND BSD-3-Clause AND BSD-2-Clause AND BSD-2-Clause-FreeBSD AND 0BSD AND CC0-1.0 AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: ccac5efc5f591f331023dbafda4d5a2f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxcrypt-devel@4.5.2-4.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxcrypt-x86-64", "name": "libxcrypt", "versionInfo": "4.5.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libxcrypt-4.5.2-4.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND BSD-3-Clause AND BSD-2-Clause AND BSD-2-Clause-FreeBSD AND 0BSD AND CC0-1.0 AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: b76c1e01a696f4ec876c524bbf9c21ae"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxcrypt@4.5.2-4.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxml2-16-x86-64", "name": "libxml2-16", "versionInfo": "2.15.4-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libxml2-16-2.15.4-1.2.hum1.x86_64.rpm", "licenseDeclared": "MIT AND ISC-Veillard AND W3C", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 9371c6f0a380cce6e0df9815a66b5fe3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxml2-16@2.15.4-1.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libzstd-x86-64", "name": "libzstd", "versionInfo": "1.5.7-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libzstd-1.5.7-6.2.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 4607fb5e4380e49438e2b427f64e4bfb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libzstd@1.5.7-6.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-linkdupes-x86-64", "name": "linkdupes", "versionInfo": "0.7.3-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/linkdupes-0.7.3-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND MIT AND Unicode-DFS-2016 AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND (MIT OR Zlib OR Apache-2.0) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 668820dd70e9efdcf45385d43d320ad1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/linkdupes@0.7.3-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lua-libs-x86-64", "name": "lua-libs", "versionInfo": "5.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/lua-libs-5.5.1-2.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 4d1425525334d76079fe029d8f56b187"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lua-libs@5.5.1-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lua-srpm-macros-x86-64", "name": "lua-srpm-macros", "versionInfo": "1-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/lua-srpm-macros-1-18.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 68293f00751e1bc423b0bb2ac4e21221"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lua-srpm-macros@1-18.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lz4-libs-x86-64", "name": "lz4-libs", "versionInfo": "1.10.0-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/lz4-libs-1.10.0-5.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: f75d082f9eb3ae2757600e466a1d67e8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lz4-libs@1.10.0-5.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-make-x86-64", "name": "make", "versionInfo": "1:4.4.1-13.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/m/make-4.4.1-13.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND GFDL-1.3-or-later AND FSFULLR", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 27eaf91e39db926c37a2951709191977"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/make@4.4.1-13.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-meson-srpm-macros-x86-64", "name": "meson-srpm-macros", "versionInfo": "1.12.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/m/meson-srpm-macros-1.12.1-2.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 7617c98560a327b943961c400248f04b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/meson-srpm-macros@1.12.1-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-mpdecimal-x86-64", "name": "mpdecimal", "versionInfo": "4.0.1-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/m/mpdecimal-4.0.1-4.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 170c2028b47e6372d7f4a490d77e9578"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/mpdecimal@4.0.1-4.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-mpfr-x86-64", "name": "mpfr", "versionInfo": "4.2.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/m/mpfr-4.2.2-4.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: c8368e2d183100ea0a459e57de84fb6a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/mpfr@4.2.2-4.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ncurses-base-x86-64", "name": "ncurses-base", "versionInfo": "6.6-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/ncurses-base-6.6-3.1.hum1.noarch.rpm", "licenseDeclared": "MIT-open-group", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: a90d36a4f9603dffe4896cbc1c4c42c0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ncurses-base@6.6-3.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ncurses-libs-x86-64", "name": "ncurses-libs", "versionInfo": "6.6-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/ncurses-libs-6.6-3.1.hum1.x86_64.rpm", "licenseDeclared": "MIT-open-group", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 50f19d0d5fce318dd61f3bf284a61eb8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ncurses-libs@6.6-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-nettle-x86-64", "name": "nettle", "versionInfo": "4.0-5.5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/nettle-4.0-5.5.hum1.x86_64.rpm", "licenseDeclared": "LGPL-3.0-or-later OR GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 2732e0a3741ef414c34b156cda9d082b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/nettle@4.0-5.5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ngtcp2-crypto-ossl-x86-64", "name": "ngtcp2-crypto-ossl", "versionInfo": "1.22.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/ngtcp2-crypto-ossl-1.22.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: de381ae81e60f4844b4152a563a7edf1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ngtcp2-crypto-ossl@1.22.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ngtcp2-x86-64", "name": "ngtcp2", "versionInfo": "1.22.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/ngtcp2-1.22.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 83e5fdfe2265869feaadd36c14dd724c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ngtcp2@1.22.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-npth-x86-64", "name": "npth", "versionInfo": "1.8-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/npth-1.8-5.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 960ca5a1290fd8277e709962817f2d9b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/npth@1.8-5.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ocaml-srpm-macros-x86-64", "name": "ocaml-srpm-macros", "versionInfo": "11-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/ocaml-srpm-macros-11-4.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 6d563b597c552c5ce842bdd83b6d8dd1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ocaml-srpm-macros@11-4.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openblas-srpm-macros-x86-64", "name": "openblas-srpm-macros", "versionInfo": "2-23.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/openblas-srpm-macros-2-23.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: bf3a7ebbd05d3c09e9712e957b99d3b5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openblas-srpm-macros@2-23.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openldap-x86-64", "name": "openldap", "versionInfo": "2.6.15-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/openldap-2.6.15-1.1.hum1.x86_64.rpm", "licenseDeclared": "OLDAP-2.8", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 06f2c8cbb7e975fd13c4755c695ddeca"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openldap@2.6.15-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssl-fips-provider-upstream-x86-64", "name": "openssl-fips-provider-upstream", "versionInfo": "1:3.5.9-0.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/openssl-fips-provider-upstream-3.5.9-0.3.hum1.x86_64.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: f4f22195d0dd6fc38849c184a87fa7da"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssl-fips-provider-upstream@3.5.9-0.3.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssl-libs-x86-64", "name": "openssl-libs", "versionInfo": "1:3.5.9-0.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/openssl-libs-3.5.9-0.3.hum1.x86_64.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: ff278afa03fb60f6e5f5f40eee7aa06a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssl-libs@3.5.9-0.3.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-p11-kit-trust-x86-64", "name": "p11-kit-trust", "versionInfo": "0.26.5-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/p11-kit-trust-0.26.5-1.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 8de88a36ce4be4422ccf3d5985f6ed5f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/p11-kit-trust@0.26.5-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-p11-kit-x86-64", "name": "p11-kit", "versionInfo": "0.26.5-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/p11-kit-0.26.5-1.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 7769729a33beed05c5fe3b491ad9c342"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/p11-kit@0.26.5-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-package-notes-srpm-macros-x86-64", "name": "package-notes-srpm-macros", "versionInfo": "0.20-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/package-notes-srpm-macros-0.20-2.hum1.noarch.rpm", "licenseDeclared": "0BSD", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 4f6f48e6009eb2455ec194f477f9b058"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/package-notes-srpm-macros@0.20-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pam-libs-x86-64", "name": "pam-libs", "versionInfo": "1.7.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pam-libs-1.7.2-4.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 45d84f782c6e8ec75d9327ceb3697eac"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pam-libs@1.7.2-4.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-patch-x86-64", "name": "patch", "versionInfo": "2.8-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/patch-2.8-6.2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: be9f10dfbcc1294681038d6557685a87"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/patch@2.8-6.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-syntax-x86-64", "name": "pcre2-syntax", "versionInfo": "10.49-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pcre2-syntax-10.49-0.2.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 5892ce77122ec3ecfec34fe8679d2737"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2-syntax@10.49-0.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-x86-64", "name": "pcre2", "versionInfo": "10.49-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pcre2-10.49-0.2.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: f04405508213c03b1dbc3a06b70e927f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2@10.49-0.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-perl-srpm-macros-x86-64", "name": "perl-srpm-macros", "versionInfo": "1-65.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/perl-srpm-macros-1-65.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 0f8b16c4e63430bcff87cb49fa941740"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/perl-srpm-macros@1-65.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-m4-x86-64", "name": "pkgconf-m4", "versionInfo": "2.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pkgconf-m4-2.5.1-2.1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later WITH Autoconf-exception-generic", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 2ee038a201817d6d825292dc25c6b873"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf-m4@2.5.1-2.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-pkg-config-x86-64", "name": "pkgconf-pkg-config", "versionInfo": "2.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pkgconf-pkg-config-2.5.1-2.1.hum1.x86_64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: baedfc689c0d5f9c6057ed88d39e7edc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf-pkg-config@2.5.1-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-x86-64", "name": "pkgconf", "versionInfo": "2.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pkgconf-2.5.1-2.1.hum1.x86_64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 835bd1e4bad5b079c83786f583596401"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf@2.5.1-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-policycoreutils-x86-64", "name": "policycoreutils", "versionInfo": "3.11-2.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/policycoreutils-3.11-2.3.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 0996619e6d531018175c763265ebb521"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/policycoreutils@3.11-2.3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-popt-x86-64", "name": "popt", "versionInfo": "1.19-11.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/popt-1.19-11.2.hum1.x86_64.rpm", "licenseDeclared": "MIT AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: c73e021a5dd1ebcd22f10bb597c28a0f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/popt@1.19-11.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-publicsuffix-list-dafsa-x86-64", "name": "publicsuffix-list-dafsa", "versionInfo": "20260624-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/publicsuffix-list-dafsa-20260624-2.1.hum1.noarch.rpm", "licenseDeclared": "MPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 258b22e06326223e99678d8138bba57d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/publicsuffix-list-dafsa@20260624-2.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pyproject-srpm-macros-x86-64", "name": "pyproject-srpm-macros", "versionInfo": "1.23.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pyproject-srpm-macros-1.23.2-1.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: e82edc55e5be2f520af44c2b0337e92a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pyproject-srpm-macros@1.23.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python-pip-wheel-x86-64", "name": "python-pip-wheel", "versionInfo": "26.2-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/python-pip-wheel-26.2-0.2.hum1.noarch.rpm", "licenseDeclared": "MIT AND Python-2.0.1 AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MPL-2.0 AND (Apache-2.0 OR BSD-2-Clause)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 30b1136e6baf2dc70c7e01a45cf96050"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python-pip-wheel@26.2-0.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python-srpm-macros-x86-64", "name": "python-srpm-macros", "versionInfo": "3.14-12.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/python-srpm-macros-3.14-12.2.hum1.noarch.rpm", "licenseDeclared": "MIT AND PSF-2.0 AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 618d0c006548a702f22df8ec49dca3a5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python-srpm-macros@3.14-12.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-boolean.py-x86-64", "name": "python3-boolean.py", "versionInfo": "5.0-10.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/p/python3-boolean.py-5.0-10.fc44.noarch.rpm", "licenseDeclared": "NOASSERTION", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: b7af00dcc3668fd56d3b09f1f1b171a9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-boolean.py@5.0-10.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-libs-x86-64", "name": "python3-libs", "versionInfo": "3.14.8-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/python3-libs-3.14.8-1.1.hum1.x86_64.rpm", "licenseDeclared": "Python-2.0.1 AND MIT AND BSD-3-Clause AND MIT-CMU AND HPND-SMC AND BSD-2-Clause AND dtoa AND Unicode-3.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: af65a70be9a4388459abf914c4d6d866"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-libs@3.14.8-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-license-expression-x86-64", "name": "python3-license-expression", "versionInfo": "30.4.4-4.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/p/python3-license-expression-30.4.4-4.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 009ffab3cc792b96ce398d6c97aa5a0a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-license-expression@30.4.4-4.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-x86-64", "name": "python3", "versionInfo": "3.14.8-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/python3-3.14.8-1.1.hum1.x86_64.rpm", "licenseDeclared": "Python-2.0.1", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 372e28a8b7ffa76c497a0c91cc712157"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3@3.14.8-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-qt5-srpm-macros-x86-64", "name": "qt5-srpm-macros", "versionInfo": "5.15.18-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/q/qt5-srpm-macros-5.15.18-3.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 4ffb52b3bdf4017e6c58f49b621e1c54"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/qt5-srpm-macros@5.15.18-3.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-qt6-srpm-macros-x86-64", "name": "qt6-srpm-macros", "versionInfo": "6.11.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/q/qt6-srpm-macros-6.11.2-1.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 8478ebf3654d031de2c0964fb1f5d8a2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/qt6-srpm-macros@6.11.2-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-readline-x86-64", "name": "readline", "versionInfo": "8.3-7.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/readline-8.3-7.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 6d5f55d88397da5ff5d6d44c166e44ad"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/readline@8.3-7.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-redhat-rpm-config-x86-64", "name": "redhat-rpm-config", "versionInfo": "345-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/redhat-rpm-config-345-4.hum1.noarch.rpm", "licenseDeclared": "GPL-1.0-or-later AND GPL-2.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 9e9b9de801d40d8b16d77058da82cde9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/redhat-rpm-config@345-4.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-build-libs-x86-64", "name": "rpm-build-libs", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-build-libs-6.1.0-1.2.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 0baa922ad9c3e1ad095fd9d12e2394d7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-build-libs@6.1.0-1.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-build-x86-64", "name": "rpm-build", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-build-6.1.0-1.2.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 67fc91cbee116e35e8237d0612cac73b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-build@6.1.0-1.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-libs-x86-64", "name": "rpm-libs", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-libs-6.1.0-1.2.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: f7db1d0e666bf1f6bab0f26286b4eb97"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-libs@6.1.0-1.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-plugin-selinux-x86-64", "name": "rpm-plugin-selinux", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-plugin-selinux-6.1.0-1.2.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 8cf4d7f735c2924dcd228c6c77bd9c78"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-plugin-selinux@6.1.0-1.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-sequoia-x86-64", "name": "rpm-sequoia", "versionInfo": "1.10.1.1-1.5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-sequoia-1.10.1.1-1.5.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later AND Apache-2.0 AND BSL-1.0 AND MIT AND Unicode-DFS-2016 AND (Apache-2.0 OR MIT) AND (MIT OR Apache-2.0 OR Zlib) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 5cf9f6fd1ce035bcea5b932aa655b4e9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-sequoia@1.10.1.1-1.5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-sign-libs-x86-64", "name": "rpm-sign-libs", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-sign-libs-6.1.0-1.2.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 82522c636e596baf9494cc2cf675e6b9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-sign-libs@6.1.0-1.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-x86-64", "name": "rpm", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-6.1.0-1.2.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 7be6cc60a527bea3108257110ef7386f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm@6.1.0-1.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rust-srpm-macros-x86-64", "name": "rust-srpm-macros", "versionInfo": "28.5-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rust-srpm-macros-28.5-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 606a7a2166723ba0e3515fa8244596dc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rust-srpm-macros@28.5-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sed-x86-64", "name": "sed", "versionInfo": "4.10-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/sed-4.10-2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: b7e0ef816a5a8405eb5ecbeead8b8387"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sed@4.10-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-selinux-policy-targeted-x86-64", "name": "selinux-policy-targeted", "versionInfo": "45.21-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/selinux-policy-targeted-45.21-1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: afd3a0e6066718b6633918ff5031c1ce"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/selinux-policy-targeted@45.21-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-selinux-policy-x86-64", "name": "selinux-policy", "versionInfo": "45.21-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/selinux-policy-45.21-1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 910958d9c5c1913d447a1e64fb0ad0b6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/selinux-policy@45.21-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-setup-x86-64", "name": "setup", "versionInfo": "2.15.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/setup-2.15.1-2.1.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 7306efa4649c49f3d249269ae6781e58"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/setup@2.15.1-2.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-shadow-utils-x86-64", "name": "shadow-utils", "versionInfo": "2:4.20.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/shadow-utils-4.20.0-1.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: a40baacbe274a1fd7467dafc995fc06f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/shadow-utils@4.20.0-1.1.hum1?arch=x86_64&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sqlite-libs-x86-64", "name": "sqlite-libs", "versionInfo": "3.54.0-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/sqlite-libs-3.54.0-0.1.hum1.x86_64.rpm", "licenseDeclared": "blessing", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: d180ffce66ebf07fa47f35fb7f173cc8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sqlite-libs@3.54.0-0.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-libs-x86-64", "name": "systemd-libs", "versionInfo": "261.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/systemd-libs-261.2-1.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 63d4edd2cfd94aca76095674502f3a39"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-libs@261.2-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-standalone-sysusers-x86-64", "name": "systemd-standalone-sysusers", "versionInfo": "261.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/systemd-standalone-sysusers-261.2-1.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 0c32ee07c90e4e4e482a2e2ba7fc9909"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-standalone-sysusers@261.2-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tar-x86-64", "name": "tar", "versionInfo": "2:1.35-10.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/t/tar-1.35-10.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 30d2b9bafd2631253a3cc376a8bb5895"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tar@1.35-10.1.hum1?arch=x86_64&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tpm2-tss-x86-64", "name": "tpm2-tss", "versionInfo": "4.2.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/t/tpm2-tss-4.2.0-1.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 945a1dbae0e23df3e0c036c7be3c6ed9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tpm2-tss@4.2.0-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tree-sitter-srpm-macros-x86-64", "name": "tree-sitter-srpm-macros", "versionInfo": "0.4.6-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/t/tree-sitter-srpm-macros-0.4.6-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: f65af17df28df341ec383338fcc47481"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tree-sitter-srpm-macros@0.4.6-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tzdata-x86-64", "name": "tzdata", "versionInfo": "2026e-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/t/tzdata-2026e-1.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain AND (GPL-2.0-only WITH ClassPath-exception-2.0)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: a1336045dee9a14e5ecb98f2e75ca023"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tzdata@2026e-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-unzip-x86-64", "name": "unzip", "versionInfo": "6.0-71.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/u/unzip-6.0-71.1.hum1.x86_64.rpm", "licenseDeclared": "Info-ZIP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 581811ac7611115e3a061c6a9742e6cc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/unzip@6.0-71.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-util-linux-core-x86-64", "name": "util-linux-core", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/u/util-linux-core-2.42.4-2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 65e6bb5ce193e259db92b1da1458a9f7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/util-linux-core@2.42.4-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-util-linux-x86-64", "name": "util-linux", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/u/util-linux-2.42.4-2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-1.0-or-later AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 9e691eac5b01ac766ab95d8f44e0f34c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/util-linux@2.42.4-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-which-x86-64", "name": "which", "versionInfo": "2.25-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/w/which-2.25-2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 6892b8bc6b61b94591d2d36efcbbb863"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/which@2.25-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xxhash-libs-x86-64", "name": "xxhash-libs", "versionInfo": "0.8.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/x/xxhash-libs-0.8.4-1.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 3d91a1be44d587bb71ff080ac2b8c588"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xxhash-libs@0.8.4-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xz-libs-x86-64", "name": "xz-libs", "versionInfo": "1:5.8.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/x/xz-libs-5.8.4-1.1.hum1.x86_64.rpm", "licenseDeclared": "0BSD", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: f53b834106c4229e7ba3483e9bafb67f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xz-libs@5.8.4-1.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xz-x86-64", "name": "xz", "versionInfo": "1:5.8.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/x/xz-5.8.4-1.1.hum1.x86_64.rpm", "licenseDeclared": "0BSD AND GPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: e2e7b3e9e3c31d3d1fda36dd4704d919"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xz@5.8.4-1.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zig-srpm-macros-x86-64", "name": "zig-srpm-macros", "versionInfo": "1-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/z/zig-srpm-macros-1-9.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 0c226eb1fa4d5fc3d272055b6397b077"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zig-srpm-macros@1-9.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zip-x86-64", "name": "zip", "versionInfo": "3.0-46.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/z/zip-3.0-46.1.hum1.x86_64.rpm", "licenseDeclared": "Info-ZIP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 06b1fc2c4bd5655fd89e389c6b0afa05"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zip@3.0-46.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zlib-ng-compat-x86-64", "name": "zlib-ng-compat", "versionInfo": "2.3.3-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/z/zlib-ng-compat-2.3.3-6.1.hum1.x86_64.rpm", "licenseDeclared": "Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: 6f0531e35b9ec4b90b2a3d2debc0c51e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zlib-ng-compat@2.3.3-6.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zstd-x86-64", "name": "zstd", "versionInfo": "1.5.7-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/z/zstd-1.5.7-6.2.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:43Z", "comment": "sigmd5: ea2450a029df76814e66045458cf3d03"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zstd@1.5.7-6.2.hum1?arch=x86_64"}]}, {"name": "cel.dev/expr", "SPDXID": "SPDXRef-Package-go-module-cel.dev-expr-3e4308df99fec5e0", "versionInfo": "v0.25.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cel.dev/expr@v0.25.2"}]}, {"name": "cloud.google.com/go", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-321c77a3ed68dd6a", "versionInfo": "v0.123.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go@v0.123.0"}]}, {"name": "cloud.google.com/go/auth", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-auth-dd0ee30b47f1c434", "versionInfo": "v0.23.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:auth:v0.23.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/auth@v0.23.2"}]}, {"name": "cloud.google.com/go/auth/oauth2adapt", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-55829954aac37940", "versionInfo": "v0.2.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:auth\\/oauth2adapt:v0.2.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/auth@v0.2.8#oauth2adapt"}]}, {"name": "cloud.google.com/go/compute/metadata", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-2a07c65db8ddadbd", "versionInfo": "v0.9.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:compute\\/metadata:v0.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/compute@v0.9.0#metadata"}]}, {"name": "cloud.google.com/go/iam", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-iam-3dcb6e83bf2bf461", "versionInfo": "v1.12.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:iam:v1.12.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/iam@v1.12.0"}]}, {"name": "cloud.google.com/go/monitoring", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-monitoring-b14d361b86b848f6", "versionInfo": "v1.30.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:monitoring:v1.30.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/monitoring@v1.30.0"}]}, {"name": "cloud.google.com/go/storage", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-storage-e27a83144e679373", "versionInfo": "v1.65.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:storage:v1.65.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/storage@v1.65.1"}]}, {"name": "dario.cat/mergo", "SPDXID": "SPDXRef-Package-go-module-dario.cat-mergo-6af779c40bb0cda2", "versionInfo": "v1.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/dario.cat/mergo@v1.0.2"}]}, {"name": "github.com/BurntSushi/toml", "SPDXID": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-8be373cb26850ea9", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:BurntSushi:toml:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/BurntSushi/toml@v1.6.0"}]}, {"name": "github.com/CycloneDX/cyclonedx-go", "SPDXID": "SPDXRef-Package-go-module-github.com-CycloneDX-cyclonedx-go-f12395ade08bb16e", "versionInfo": "v0.12.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:CycloneDX:cyclonedx-go:v0.12.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:CycloneDX:cyclonedx_go:v0.12.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/CycloneDX/cyclonedx-go@v0.12.0"}]}, {"name": "github.com/DataDog/zstd", "SPDXID": "SPDXRef-Package-go-module-github.com-DataDog-zstd-32ffa33e85d92c4f", "versionInfo": "v1.5.7", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:DataDog:zstd:v1.5.7:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/DataDog/zstd@v1.5.7"}]}, {"name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp", "SPDXID": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-detectors-gcp-20deb57b069386e0", "versionInfo": "v1.33.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry-operations-go\\/detectors\\/gcp:v1.33.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry_operations_go\\/detectors\\/gcp:v1.33.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go@v1.33.0#detectors/gcp"}]}, {"name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric", "SPDXID": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-exporter-metric-6dab49020ed43907", "versionInfo": "v0.57.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry-operations-go\\/exporter\\/metric:v0.57.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry_operations_go\\/exporter\\/metric:v0.57.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go@v0.57.0#exporter/metric"}]}, {"name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping", "SPDXID": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-internal-resourcemapping-93bccc4f33a9ccc4", "versionInfo": "v0.57.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry-operations-go\\/internal\\/resourcemapping:v0.57.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry_operations_go\\/internal\\/resourcemapping:v0.57.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go@v0.57.0#internal/resourcemapping"}]}, {"name": "github.com/Intevation/gval", "SPDXID": "SPDXRef-Package-go-module-github.com-Intevation-gval-338712d568fe840f", "versionInfo": "v1.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Intevation:gval:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Intevation/gval@v1.3.0"}]}, {"name": "github.com/Intevation/jsonpath", "SPDXID": "SPDXRef-Package-go-module-github.com-Intevation-jsonpath-66cfbece15db56f6", "versionInfo": "v0.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Intevation:jsonpath:v0.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Intevation/jsonpath@v0.2.1"}]}, {"name": "github.com/Masterminds/goutils", "SPDXID": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-5188df0b81ec434f", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:goutils_project:goutils:v1.1.1:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Masterminds/goutils@v1.1.1"}]}, {"name": "github.com/Masterminds/semver/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-3bc09960970c6e93", "versionInfo": "v3.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Masterminds:semver\\/v3:v3.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Masterminds/semver@v3.5.0#v3"}]}, {"name": "github.com/Masterminds/sprig/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-4ce313b798152e8e", "versionInfo": "v3.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Masterminds:sprig\\/v3:v3.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Masterminds/sprig@v3.3.0#v3"}]}, {"name": "github.com/OneOfOne/xxhash", "SPDXID": "SPDXRef-Package-go-module-github.com-OneOfOne-xxhash-e4b71e69c275c934", "versionInfo": "v1.2.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:OneOfOne:xxhash:v1.2.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/OneOfOne/xxhash@v1.2.8"}]}, {"name": "github.com/ProtonMail/go-crypto", "SPDXID": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-19d5c5ad165767ed", "versionInfo": "v1.4.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ProtonMail:go-crypto:v1.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ProtonMail:go_crypto:v1.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/ProtonMail/go-crypto@v1.4.1"}]}, {"name": "github.com/STARRY-S/zip", "SPDXID": "SPDXRef-Package-go-module-github.com-STARRY-S-zip-da3bad7ec194de56", "versionInfo": "v0.2.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:STARRY-S:zip:v0.2.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:STARRY_S:zip:v0.2.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:STARRY:zip:v0.2.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/STARRY-S/zip@v0.2.3"}]}, {"name": "github.com/acarl005/stripansi", "SPDXID": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-be4f63fa5b247ada", "versionInfo": "v0.0.0-20180116102854-5a71ef0e047d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:acarl005:stripansi:v0.0.0-20180116102854-5a71ef0e047d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/acarl005/stripansi@v0.0.0-20180116102854-5a71ef0e047d"}]}, {"name": "github.com/acobaugh/osrelease", "SPDXID": "SPDXRef-Package-go-module-github.com-acobaugh-osrelease-f83fb2c7c3cc811a", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:acobaugh:osrelease:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/acobaugh/osrelease@v0.1.0"}]}, {"name": "github.com/adrg/xdg", "SPDXID": "SPDXRef-Package-go-module-github.com-adrg-xdg-1ccf1d268da23328", "versionInfo": "v0.5.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:adrg:xdg:v0.5.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/adrg/xdg@v0.5.3"}]}, {"name": "github.com/agext/levenshtein", "SPDXID": "SPDXRef-Package-go-module-github.com-agext-levenshtein-307135a3e71ad5b0", "versionInfo": "v1.2.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:agext:levenshtein:v1.2.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/agext/levenshtein@v1.2.3"}]}, {"name": "github.com/anchore/bubbly", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-bubbly-74da2cff68725218", "versionInfo": "v0.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:bubbly:v0.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/bubbly@v0.2.1"}]}, {"name": "github.com/anchore/clio", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-clio-925bf3919208e9fe", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:clio:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/clio@v0.1.1"}]}, {"name": "github.com/anchore/fangs", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-fangs-b5da60bd15bb6752", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:fangs:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/fangs@v0.1.1"}]}, {"name": "github.com/anchore/go-collections", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-collections-9c6e7d53836407c4", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-collections:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_collections:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-collections@v0.1.1"}]}, {"name": "github.com/anchore/go-homedir", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-homedir-f4ae60a7c1bf5082", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-homedir:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_homedir:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-homedir@v0.1.1"}]}, {"name": "github.com/anchore/go-logger", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-logger-88b3da7b309b5b48", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-logger:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_logger:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-logger@v0.1.1"}]}, {"name": "github.com/anchore/go-lzo", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-lzo-36f868801dba853e", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-lzo:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_lzo:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-lzo@v0.1.1"}]}, {"name": "github.com/anchore/go-macholibre", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-macholibre-16b9a8c04d626683", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-macholibre:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_macholibre:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-macholibre@v0.1.1"}]}, {"name": "github.com/anchore/go-rpmdb", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-rpmdb-50d329c022b6f15c", "versionInfo": "v0.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-rpmdb:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_rpmdb:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-rpmdb@v0.2.0"}]}, {"name": "github.com/anchore/go-struct-converter", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-struct-converter-4a596a0845ab2f7d", "versionInfo": "v0.2.0-rc2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-struct-converter:v0.2.0-rc2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_struct_converter:v0.2.0-rc2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-struct-converter@v0.2.0-rc2"}]}, {"name": "github.com/anchore/go-sync", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-sync-49adc6b78341bf5d", "versionInfo": "v0.1.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-sync:v0.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_sync:v0.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-sync@v0.1.2"}]}, {"name": "github.com/anchore/go-version", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-version-12031ebb9732130e", "versionInfo": "v1.2.2-0.20210903204242-51efa5b487c4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-version:v1.2.2-0.20210903204242-51efa5b487c4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_version:v1.2.2-0.20210903204242-51efa5b487c4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-version@v1.2.2-0.20210903204242-51efa5b487c4"}]}, {"name": "github.com/anchore/grype", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "versionInfo": "v0.119.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:grype:v0.119.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/grype@v0.119.0"}]}, {"name": "github.com/anchore/packageurl-go", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-packageurl-go-6d3f54f8ac98a714", "versionInfo": "v0.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:packageurl-go:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:packageurl_go:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/packageurl-go@v0.2.0"}]}, {"name": "github.com/anchore/stereoscope", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-stereoscope-047f2a8dfdff2ec7", "versionInfo": "v0.3.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:stereoscope:v0.3.2:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/stereoscope@v0.3.2"}]}, {"name": "github.com/anchore/syft", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-syft-76b24254d1aa5a2d", "versionInfo": "v1.52.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:syft:v1.52.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/syft@v1.52.0"}]}, {"name": "github.com/andybalholm/brotli", "SPDXID": "SPDXRef-Package-go-module-github.com-andybalholm-brotli-56e1f06baaf4a218", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:andybalholm:brotli:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/andybalholm/brotli@v1.2.0"}]}, {"name": "github.com/apparentlymart/go-textseg/v15", "SPDXID": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-1c113dae8ece9c91", "versionInfo": "v15.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apparentlymart:go-textseg\\/v15:v15.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apparentlymart:go_textseg\\/v15:v15.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/apparentlymart/go-textseg@v15.0.0#v15"}]}, {"name": "github.com/aquasecurity/go-pep440-version", "SPDXID": "SPDXRef-Package-go-module-github.com-aquasecurity-go-pep440-version-09af48a2a94fe3b0", "versionInfo": "v0.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity:go-pep440-version:v0.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity:go_pep440_version:v0.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aquasecurity/go-pep440-version@v0.0.1"}]}, {"name": "github.com/aquasecurity/go-version", "SPDXID": "SPDXRef-Package-go-module-github.com-aquasecurity-go-version-3cdb3739620c8830", "versionInfo": "v0.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity:go-version:v0.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity:go_version:v0.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aquasecurity/go-version@v0.0.1"}]}, {"name": "github.com/araddon/dateparse", "SPDXID": "SPDXRef-Package-go-module-github.com-araddon-dateparse-7a997f87ffe1d6e8", "versionInfo": "v0.0.0-20210429162001-6b43995a97de", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:araddon:dateparse:v0.0.0-20210429162001-6b43995a97de:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/araddon/dateparse@v0.0.0-20210429162001-6b43995a97de"}]}, {"name": "github.com/aws/aws-sdk-go-v2", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-b946022d64c2708f", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.44.0"}]}, {"name": "github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-aws-protocol-eventstream-2a4ccbeaebd5f05f", "versionInfo": "v1.7.20", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/aws\\/protocol\\/eventstream:v1.7.20:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/aws\\/protocol\\/eventstream:v1.7.20:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.7.20#aws/protocol/eventstream"}]}, {"name": "github.com/aws/aws-sdk-go-v2/config", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-config-3da23dfe76cb8bd5", "versionInfo": "v1.32.40", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/config:v1.32.40:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/config:v1.32.40:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.32.40#config"}]}, {"name": "github.com/aws/aws-sdk-go-v2/credentials", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-credentials-fe144c2a9ba9219e", "versionInfo": "v1.19.39", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/credentials:v1.19.39:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/credentials:v1.19.39:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.19.39#credentials"}]}, {"name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-feature-ec2-imds-ddd0e9558f46bcea", "versionInfo": "v1.18.40", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/feature\\/ec2\\/imds:v1.18.40:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/feature\\/ec2\\/imds:v1.18.40:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.18.40#feature/ec2/imds"}]}, {"name": "github.com/aws/aws-sdk-go-v2/internal/configsources", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-configsources-2fec998578d16401", "versionInfo": "v1.4.40", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/configsources:v1.4.40:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/configsources:v1.4.40:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.4.40#internal/configsources"}]}, {"name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-endpoints-v2-913782d214eca239", "versionInfo": "v2.7.40", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/endpoints\\/v2:v2.7.40:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/endpoints\\/v2:v2.7.40:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v2.7.40#internal/endpoints/v2"}]}, {"name": "github.com/aws/aws-sdk-go-v2/internal/v4a", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-v4a-e4c81f476b7e03eb", "versionInfo": "v1.4.41", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/v4a:v1.4.41:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/v4a:v1.4.41:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.4.41#internal/v4a"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-accept-encoding-8c7275fc39c8eca8", "versionInfo": "v1.13.19", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/accept-encoding:v1.13.19:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/accept_encoding:v1.13.19:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.13.19#service/internal/accept-encoding"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/internal/checksum", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-checksum-98bdd6fb95ce5715", "versionInfo": "v1.10.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/checksum:v1.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/checksum:v1.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.10.0#service/internal/checksum"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-presigned-url-f387836146e8cd80", "versionInfo": "v1.13.40", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/presigned-url:v1.13.40:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/presigned_url:v1.13.40:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.13.40#service/internal/presigned-url"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/internal/s3shared", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-s3shared-046c89906dbfd047", "versionInfo": "v1.19.41", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/s3shared:v1.19.41:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/s3shared:v1.19.41:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.19.41#service/internal/s3shared"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/s3", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-s3-ef02173b215a29a3", "versionInfo": "v1.108.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/s3:v1.108.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/s3:v1.108.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.108.0#service/s3"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/signin", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-signin-a5004611340725d2", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/signin:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/signin:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.6.0#service/signin"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/sso", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sso-3864ee0e3b3544e5", "versionInfo": "v1.34.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/sso:v1.34.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/sso:v1.34.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.34.0#service/sso"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/ssooidc", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-ssooidc-8fcbed41b4e86b2e", "versionInfo": "v1.39.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/ssooidc:v1.39.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/ssooidc:v1.39.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.39.0#service/ssooidc"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/sts", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sts-ca7ccfb508523df2", "versionInfo": "v1.46.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/sts:v1.46.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/sts:v1.46.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.46.0#service/sts"}]}, {"name": "github.com/aws/smithy-go", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-smithy-go-2ed84f444da91b09", "versionInfo": "v1.28.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:smithy-go:v1.28.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:smithy_go:v1.28.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/smithy-go@v1.28.1"}]}, {"name": "github.com/aymanbagabas/go-osc52/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-aymanbagabas-go-osc52-v2-27ada4d00fd6df8a", "versionInfo": "v2.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aymanbagabas:go-osc52\\/v2:v2.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aymanbagabas:go_osc52\\/v2:v2.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aymanbagabas/go-osc52@v2.0.1#v2"}]}, {"name": "github.com/becheran/wildmatch-go", "SPDXID": "SPDXRef-Package-go-module-github.com-becheran-wildmatch-go-cf2029ab5cbb0ab9", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:becheran:wildmatch-go:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:becheran:wildmatch_go:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/becheran/wildmatch-go@v1.0.0"}]}, {"name": "github.com/bgentry/go-netrc", "SPDXID": "SPDXRef-Package-go-module-github.com-bgentry-go-netrc-6651f24cc432465d", "versionInfo": "v0.0.0-20140422174119-9fd32a8b3d3d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bgentry:go-netrc:v0.0.0-20140422174119-9fd32a8b3d3d:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bgentry:go_netrc:v0.0.0-20140422174119-9fd32a8b3d3d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bgentry/go-netrc@v0.0.0-20140422174119-9fd32a8b3d3d"}]}, {"name": "github.com/bitnami/go-version", "SPDXID": "SPDXRef-Package-go-module-github.com-bitnami-go-version-69c1eb5b8d6ad97d", "versionInfo": "v0.0.0-20250505154626-452e8c5ee607", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bitnami:go-version:v0.0.0-20250505154626-452e8c5ee607:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bitnami:go_version:v0.0.0-20250505154626-452e8c5ee607:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bitnami/go-version@v0.0.0-20250505154626-452e8c5ee607"}]}, {"name": "github.com/blakesmith/ar", "SPDXID": "SPDXRef-Package-go-module-github.com-blakesmith-ar-e9bab9e9cd0248f4", "versionInfo": "v0.0.0-20190502131153-809d4375e1fb", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:blakesmith:ar:v0.0.0-20190502131153-809d4375e1fb:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/blakesmith/ar@v0.0.0-20190502131153-809d4375e1fb"}]}, {"name": "github.com/bmatcuk/doublestar/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v2-33bf11a78ed18f1e", "versionInfo": "v2.0.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bmatcuk:doublestar\\/v2:v2.0.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bmatcuk/doublestar@v2.0.4#v2"}]}, {"name": "github.com/bmatcuk/doublestar/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v4-4e5a49aa8e64ceff", "versionInfo": "v4.10.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bmatcuk:doublestar\\/v4:v4.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bmatcuk/doublestar@v4.10.0#v4"}]}, {"name": "github.com/bodgit/plumbing", "SPDXID": "SPDXRef-Package-go-module-github.com-bodgit-plumbing-a43eafe89820277e", "versionInfo": "v1.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bodgit:plumbing:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bodgit/plumbing@v1.3.0"}]}, {"name": "github.com/bodgit/sevenzip", "SPDXID": "SPDXRef-Package-go-module-github.com-bodgit-sevenzip-963994f412d10d5d", "versionInfo": "v1.6.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bodgit:sevenzip:v1.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bodgit/sevenzip@v1.6.1"}]}, {"name": "github.com/bodgit/windows", "SPDXID": "SPDXRef-Package-go-module-github.com-bodgit-windows-dadf666f11ba094d", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bodgit:windows:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bodgit/windows@v1.0.1"}]}, {"name": "github.com/cespare/xxhash/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-a25cd6b7e22ffaac", "versionInfo": "v2.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cespare/xxhash@v2.3.0#v2"}]}, {"name": "github.com/charmbracelet/bubbles", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbles-9f3f2da93680d3e5", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:bubbles:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/bubbles@v1.0.0"}]}, {"name": "github.com/charmbracelet/bubbletea", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbletea-f9f508f49bfb91d7", "versionInfo": "v1.3.10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:bubbletea:v1.3.10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/bubbletea@v1.3.10"}]}, {"name": "github.com/charmbracelet/colorprofile", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-colorprofile-6dba3626f0b69a9f", "versionInfo": "v0.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:colorprofile:v0.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/colorprofile@v0.4.3"}]}, {"name": "github.com/charmbracelet/harmonica", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-harmonica-60f2d275a7e1ae57", "versionInfo": "v0.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:harmonica:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/harmonica@v0.2.0"}]}, {"name": "github.com/charmbracelet/lipgloss", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-lipgloss-4726668aa47bebe7", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:lipgloss:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/lipgloss@v1.1.0"}]}, {"name": "github.com/charmbracelet/x/ansi", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-x-ansi-06eb651a60e3051a", "versionInfo": "v0.11.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:x\\/ansi:v0.11.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/x@v0.11.6#ansi"}]}, {"name": "github.com/charmbracelet/x/cellbuf", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-x-cellbuf-e0e75207b1ae813c", "versionInfo": "v0.0.15", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:x\\/cellbuf:v0.0.15:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/x@v0.0.15#cellbuf"}]}, {"name": "github.com/charmbracelet/x/term", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-x-term-866f666c9b43203b", "versionInfo": "v0.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:x\\/term:v0.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/x@v0.2.2#term"}]}, {"name": "github.com/clipperhouse/displaywidth", "SPDXID": "SPDXRef-Package-go-module-github.com-clipperhouse-displaywidth-6abfcad0fde5aa31", "versionInfo": "v0.11.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:clipperhouse:displaywidth:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/clipperhouse/displaywidth@v0.11.0"}]}, {"name": "github.com/clipperhouse/uax29/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-0e607a1eef712686", "versionInfo": "v2.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:clipperhouse:uax29\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/clipperhouse/uax29@v2.7.0#v2"}]}, {"name": "github.com/cloudflare/circl", "SPDXID": "SPDXRef-Package-go-module-github.com-cloudflare-circl-307ef82247abfddd", "versionInfo": "v1.6.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cloudflare:circl:v1.6.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cloudflare/circl@v1.6.3"}]}, {"name": "github.com/cncf/xds/go", "SPDXID": "SPDXRef-Package-go-module-github.com-cncf-xds-go-c2fc66bf85548ac9", "versionInfo": "v0.0.0-20260202195803-dba9d589def2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cncf:xds\\/go:v0.0.0-20260202195803-dba9d589def2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cncf/xds@v0.0.0-20260202195803-dba9d589def2#go"}]}, {"name": "github.com/containerd/containerd/api", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-8230f2b4bba735f4", "versionInfo": "v1.11.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:containerd\\/api:v1.11.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/containerd@v1.11.1#api"}]}, {"name": "github.com/containerd/containerd/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-3243e6b3d0196262", "versionInfo": "v2.3.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:containerd\\/v2:v2.3.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/containerd@v2.3.5#v2"}]}, {"name": "github.com/containerd/continuity", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-continuity-c83c10c2bdff37df", "versionInfo": "v0.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:continuity:v0.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/continuity@v0.5.0"}]}, {"name": "github.com/containerd/errdefs", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-errdefs-bab0905ec25511cc", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:errdefs:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/errdefs@v1.0.0"}]}, {"name": "github.com/containerd/errdefs/pkg", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-ddaf22c115a7ccc4", "versionInfo": "v0.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:errdefs\\/pkg:v0.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/errdefs@v0.3.0#pkg"}]}, {"name": "github.com/containerd/fifo", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-fifo-d5fb743b8837f525", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:fifo:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/fifo@v1.1.0"}]}, {"name": "github.com/containerd/log", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-log-03ca7716a96b200c", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:log:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/log@v0.1.0"}]}, {"name": "github.com/containerd/platforms", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-platforms-36620f1297a5756f", "versionInfo": "v1.0.0-rc.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:platforms:v1.0.0-rc.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/platforms@v1.0.0-rc.5"}]}, {"name": "github.com/containerd/plugin", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-plugin-e55613b471264836", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:plugin:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/plugin@v1.1.0"}]}, {"name": "github.com/containerd/ttrpc", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-10721c341c1437b4", "versionInfo": "v1.2.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:ttrpc:v1.2.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/ttrpc@v1.2.8"}]}, {"name": "github.com/containerd/typeurl/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-85c9684e4383179f", "versionInfo": "v2.2.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:typeurl\\/v2:v2.2.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/typeurl@v2.2.3#v2"}]}, {"name": "github.com/cyphar/filepath-securejoin", "SPDXID": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-43f8326a3f7ec57d", "versionInfo": "v0.6.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyphar:filepath-securejoin:v0.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyphar:filepath_securejoin:v0.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cyphar/filepath-securejoin@v0.6.1"}]}, {"name": "github.com/deitch/magic", "SPDXID": "SPDXRef-Package-go-module-github.com-deitch-magic-228ae80542cdc5f9", "versionInfo": "v0.0.0-20240306090643-c67ab88f10cb", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:deitch:magic:v0.0.0-20240306090643-c67ab88f10cb:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/deitch/magic@v0.0.0-20240306090643-c67ab88f10cb"}]}, {"name": "github.com/diskfs/go-diskfs", "SPDXID": "SPDXRef-Package-go-module-github.com-diskfs-go-diskfs-bdd589b4d25b6836", "versionInfo": "v1.9.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:diskfs:go-diskfs:v1.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:diskfs:go_diskfs:v1.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/diskfs/go-diskfs@v1.9.4"}]}, {"name": "github.com/distribution/reference", "SPDXID": "SPDXRef-Package-go-module-github.com-distribution-reference-c26b35f64eba50f6", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:distribution:reference:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/distribution/reference@v0.6.0"}]}, {"name": "github.com/docker/cli", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-cli-e0f555e52fb18165", "versionInfo": "v29.8.0+incompatible", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:cli:v29.8.0\\+incompatible:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/cli@v29.8.0%2Bincompatible"}]}, {"name": "github.com/docker/docker", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-docker-effd8a5e55f4bcf8", "versionInfo": "v28.5.2+incompatible", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:docker:v28.5.2\\+incompatible:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/docker@v28.5.2%2Bincompatible"}]}, {"name": "github.com/docker/docker-credential-helpers", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-c25f781c3766bea2", "versionInfo": "v0.9.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:docker-credential-helpers:v0.9.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:docker_credential_helpers:v0.9.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.5"}]}, {"name": "github.com/docker/go-connections", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-go-connections-055f9b571a87230d", "versionInfo": "v0.8.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go-connections:v0.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go_connections:v0.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/go-connections@v0.8.1"}]}, {"name": "github.com/docker/go-units", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-go-units-28f91c6dac3edfa8", "versionInfo": "v0.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go-units:v0.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go_units:v0.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/go-units@v0.5.0"}]}, {"name": "github.com/dsnet/compress", "SPDXID": "SPDXRef-Package-go-module-github.com-dsnet-compress-0884d09d5a4edf94", "versionInfo": "v0.0.2-0.20230904184137-39efe44ab707", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dsnet:compress:v0.0.2-0.20230904184137-39efe44ab707:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/dsnet/compress@v0.0.2-0.20230904184137-39efe44ab707"}]}, {"name": "github.com/dustin/go-humanize", "SPDXID": "SPDXRef-Package-go-module-github.com-dustin-go-humanize-38b92c12db034b8b", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dustin:go-humanize:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dustin:go_humanize:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/dustin/go-humanize@v1.0.1"}]}, {"name": "github.com/elliotchance/phpserialize", "SPDXID": "SPDXRef-Package-go-module-github.com-elliotchance-phpserialize-62e5cd39b465fae7", "versionInfo": "v1.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:elliotchance:phpserialize:v1.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/elliotchance/phpserialize@v1.4.0"}]}, {"name": "github.com/emirpasic/gods", "SPDXID": "SPDXRef-Package-go-module-github.com-emirpasic-gods-f7fde325079a7eae", "versionInfo": "v1.18.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:emirpasic:gods:v1.18.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/emirpasic/gods@v1.18.1"}]}, {"name": "github.com/envoyproxy/go-control-plane/envoy", "SPDXID": "SPDXRef-Package-go-module-github.com-envoyproxy-go-control-plane-envoy-f9f69d4bf43aa209", "versionInfo": "v1.37.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:envoyproxy:go-control-plane\\/envoy:v1.37.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:envoyproxy:go_control_plane\\/envoy:v1.37.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/envoyproxy/go-control-plane@v1.37.0#envoy"}]}, {"name": "github.com/envoyproxy/protoc-gen-validate", "SPDXID": "SPDXRef-Package-go-module-github.com-envoyproxy-protoc-gen-validate-2eaa9d37870fb68e", "versionInfo": "v1.3.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:envoyproxy:protoc-gen-validate:v1.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:envoyproxy:protoc_gen_validate:v1.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.3.3"}]}, {"name": "github.com/facebookincubator/nvdtools", "SPDXID": "SPDXRef-Package-go-module-github.com-facebookincubator-nvdtools-64bcae274046b36c", "versionInfo": "v0.1.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:facebookincubator:nvdtools:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/facebookincubator/nvdtools@v0.1.5"}]}, {"name": "github.com/fatih/color", "SPDXID": "SPDXRef-Package-go-module-github.com-fatih-color-2492abda9d250bfb", "versionInfo": "v1.19.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fatih:color:v1.19.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fatih/color@v1.19.0"}]}, {"name": "github.com/felixge/fgprof", "SPDXID": "SPDXRef-Package-go-module-github.com-felixge-fgprof-028e09b8e0af7d54", "versionInfo": "v0.9.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:felixge:fgprof:v0.9.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/felixge/fgprof@v0.9.5"}]}, {"name": "github.com/felixge/httpsnoop", "SPDXID": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-aa546e9b20bbfa2f", "versionInfo": "v1.0.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:felixge:httpsnoop:v1.0.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/felixge/httpsnoop@v1.0.4"}]}, {"name": "github.com/fsnotify/fsnotify", "SPDXID": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-a6092a4d1d89dc2d", "versionInfo": "v1.9.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fsnotify:fsnotify:v1.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fsnotify/fsnotify@v1.9.0"}]}, {"name": "github.com/gabriel-vasile/mimetype", "SPDXID": "SPDXRef-Package-go-module-github.com-gabriel-vasile-mimetype-23afdc05ecdaf6ce", "versionInfo": "v1.4.15", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gabriel-vasile:mimetype:v1.4.15:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gabriel_vasile:mimetype:v1.4.15:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gabriel:mimetype:v1.4.15:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gabriel-vasile/mimetype@v1.4.15"}]}, {"name": "github.com/github/go-spdx/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-github-go-spdx-v2-5d56e43d8bf3fe2e", "versionInfo": "v2.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github:go-spdx\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github:go_spdx\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/github/go-spdx@v2.7.0#v2"}]}, {"name": "github.com/glebarez/go-sqlite", "SPDXID": "SPDXRef-Package-go-module-github.com-glebarez-go-sqlite-60af756bb33feef5", "versionInfo": "v1.22.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:glebarez:go-sqlite:v1.22.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:glebarez:go_sqlite:v1.22.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/glebarez/go-sqlite@v1.22.0"}]}, {"name": "github.com/glebarez/sqlite", "SPDXID": "SPDXRef-Package-go-module-github.com-glebarez-sqlite-bcc08be7aba0c066", "versionInfo": "v1.11.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:glebarez:sqlite:v1.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/glebarez/sqlite@v1.11.0"}]}, {"name": "github.com/go-git/gcfg", "SPDXID": "SPDXRef-Package-go-module-github.com-go-git-gcfg-90d49e96e6d7811b", "versionInfo": "v1.5.1-0.20230307220236-3a3c6141e376", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-git:gcfg:v1.5.1-0.20230307220236-3a3c6141e376:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_git:gcfg:v1.5.1-0.20230307220236-3a3c6141e376:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:gcfg:v1.5.1-0.20230307220236-3a3c6141e376:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-git/gcfg@v1.5.1-0.20230307220236-3a3c6141e376"}]}, {"name": "github.com/go-git/go-billy/v5", "SPDXID": "SPDXRef-Package-go-module-github.com-go-git-go-billy-v5-d9ba19a21e74cc4f", "versionInfo": "v5.9.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-git:go-billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-git:go_billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_git:go-billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_git:go_billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-git/go-billy@v5.9.1#v5"}]}, {"name": "github.com/go-git/go-git/v5", "SPDXID": "SPDXRef-Package-go-module-github.com-go-git-go-git-v5-00bd7dd562277aa8", "versionInfo": "v5.19.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-git:go-git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-git:go_git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_git:go-git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_git:go_git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-git/go-git@v5.19.2#v5"}]}, {"name": "github.com/go-jose/go-jose/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-436c449d4d721777", "versionInfo": "v4.1.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-jose/go-jose@v4.1.4#v4"}]}, {"name": "github.com/go-logr/logr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-logr-572375f039717827", "versionInfo": "v1.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:logr:v1.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:logr:v1.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:logr:v1.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/logr@v1.4.3"}]}, {"name": "github.com/go-logr/stdr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-stdr-3b8a59018f129276", "versionInfo": "v1.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/stdr@v1.2.2"}]}, {"name": "github.com/go-restruct/restruct", "SPDXID": "SPDXRef-Package-go-module-github.com-go-restruct-restruct-e0ed6d7b9e4189fa", "versionInfo": "v1.2.0-alpha", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-restruct:restruct:v1.2.0-alpha:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_restruct:restruct:v1.2.0-alpha:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:restruct:v1.2.0-alpha:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-restruct/restruct@v1.2.0-alpha"}]}, {"name": "github.com/go-viper/mapstructure/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-a88141cd504072b7", "versionInfo": "v2.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-viper/mapstructure@v2.5.0#v2"}]}, {"name": "github.com/goccy/go-yaml", "SPDXID": "SPDXRef-Package-go-module-github.com-goccy-go-yaml-c8ed6713338e81a8", "versionInfo": "v1.19.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:goccy:go-yaml:v1.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:goccy:go_yaml:v1.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/goccy/go-yaml@v1.19.2"}]}, {"name": "github.com/gocsaf/csaf/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-gocsaf-csaf-v3-7fdea347cf8476cc", "versionInfo": "v3.5.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gocsaf:csaf\\/v3:v3.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gocsaf/csaf@v3.5.1#v3"}]}, {"name": "github.com/gogo/protobuf", "SPDXID": "SPDXRef-Package-go-module-github.com-gogo-protobuf-43d3197d43adc278", "versionInfo": "v1.3.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gogo:protobuf:v1.3.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gogo/protobuf@v1.3.2"}]}, {"name": "github.com/gohugoio/hashstructure", "SPDXID": "SPDXRef-Package-go-module-github.com-gohugoio-hashstructure-65e07b14c8465767", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gohugoio:hashstructure:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gohugoio/hashstructure@v0.6.0"}]}, {"name": "github.com/golang/groupcache", "SPDXID": "SPDXRef-Package-go-module-github.com-golang-groupcache-77cb1f6eb14578e1", "versionInfo": "v0.0.0-20241129210726-2c02b8208cf8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:groupcache:v0.0.0-20241129210726-2c02b8208cf8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/golang/groupcache@v0.0.0-20241129210726-2c02b8208cf8"}]}, {"name": "github.com/google/go-cmp", "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-cmp-d1430265f4af244d", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go-cmp:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go_cmp:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/go-cmp@v0.7.0"}]}, {"name": "github.com/google/go-containerregistry", "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-0e5064cb931fd63f", "versionInfo": "v0.22.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go-containerregistry:v0.22.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go_containerregistry:v0.22.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/go-containerregistry@v0.22.1"}]}, {"name": "github.com/google/licensecheck", "SPDXID": "SPDXRef-Package-go-module-github.com-google-licensecheck-40bd7e54da5c97f5", "versionInfo": "v0.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:licensecheck:v0.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/licensecheck@v0.3.1"}]}, {"name": "github.com/google/pprof", "SPDXID": "SPDXRef-Package-go-module-github.com-google-pprof-4d213057d3a734c4", "versionInfo": "v0.0.0-20260802141513-ef3492d7dac3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:pprof:v0.0.0-20260802141513-ef3492d7dac3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/pprof@v0.0.0-20260802141513-ef3492d7dac3"}]}, {"name": "github.com/google/s2a-go", "SPDXID": "SPDXRef-Package-go-module-github.com-google-s2a-go-a5f1cc97c46b15bd", "versionInfo": "v0.1.9", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:s2a-go:v0.1.9:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:s2a_go:v0.1.9:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/s2a-go@v0.1.9"}]}, {"name": "github.com/google/uuid", "SPDXID": "SPDXRef-Package-go-module-github.com-google-uuid-d1aad4f773abec11", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/uuid@v1.6.0"}]}, {"name": "github.com/googleapis/enterprise-certificate-proxy", "SPDXID": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-7acb51ac59af95ed", "versionInfo": "v0.3.20", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:enterprise-certificate-proxy:v0.3.20:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:enterprise_certificate_proxy:v0.3.20:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.20"}]}, {"name": "github.com/googleapis/gax-go/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-4aaf1fe1177cc2ff", "versionInfo": "v2.24.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:gax-go\\/v2:v2.24.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:gax_go\\/v2:v2.24.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/googleapis/gax-go@v2.24.0#v2"}]}, {"name": "github.com/gookit/color", "SPDXID": "SPDXRef-Package-go-module-github.com-gookit-color-5159a7261a7e3a1c", "versionInfo": "v1.6.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gookit:color:v1.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gookit/color@v1.6.1"}]}, {"name": "github.com/gpustack/gguf-parser-go", "SPDXID": "SPDXRef-Package-go-module-github.com-gpustack-gguf-parser-go-e1aa1e11326cb528", "versionInfo": "v0.26.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gpustack:gguf-parser-go:v0.26.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gpustack:gguf_parser_go:v0.26.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gpustack/gguf-parser-go@v0.26.3"}]}, {"name": "github.com/hako/durafmt", "SPDXID": "SPDXRef-Package-go-module-github.com-hako-durafmt-59baa2ff19378990", "versionInfo": "v0.0.0-20210608085754-5c1018a4e16b", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hako:durafmt:v0.0.0-20210608085754-5c1018a4e16b:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hako/durafmt@v0.0.0-20210608085754-5c1018a4e16b"}]}, {"name": "github.com/hashicorp/aws-sdk-go-base/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-aws-sdk-go-base-v2-02f264c917327347", "versionInfo": "v2.0.0-beta.74", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:aws-sdk-go-base\\/v2:v2.0.0-beta.74:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:aws_sdk_go_base\\/v2:v2.0.0-beta.74:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/aws-sdk-go-base@v2.0.0-beta.74#v2"}]}, {"name": "github.com/hashicorp/errwrap", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-cd705e47cc406c6c", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:errwrap:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0"}]}, {"name": "github.com/hashicorp/go-cleanhttp", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-5b624c1c4679d04d", "versionInfo": "v0.5.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-cleanhttp:v0.5.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_cleanhttp:v0.5.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2"}]}, {"name": "github.com/hashicorp/go-getter", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-getter-2d9729d09912b8db", "versionInfo": "v1.8.9", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-getter:v1.8.9:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_getter:v1.8.9:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-getter@v1.8.9"}]}, {"name": "github.com/hashicorp/go-multierror", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-4a0c44df6f2477ba", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-multierror:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_multierror:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1"}]}, {"name": "github.com/hashicorp/go-version", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-3328cc3e8532f19b", "versionInfo": "v1.9.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-version:v1.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_version:v1.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-version@v1.9.0"}]}, {"name": "github.com/hashicorp/golang-lru/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-golang-lru-v2-4cb75c535d1d44de", "versionInfo": "v2.0.7", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:golang-lru\\/v2:v2.0.7:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:golang_lru\\/v2:v2.0.7:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/golang-lru@v2.0.7#v2"}]}, {"name": "github.com/hashicorp/hcl/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-aabcae1a264b7ae0", "versionInfo": "v2.24.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:hcl\\/v2:v2.24.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/hcl@v2.24.0#v2"}]}, {"name": "github.com/henvic/httpretty", "SPDXID": "SPDXRef-Package-go-module-github.com-henvic-httpretty-ea8fcbe93232214c", "versionInfo": "v0.1.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:henvic:httpretty:v0.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/henvic/httpretty@v0.1.4"}]}, {"name": "github.com/huandu/xstrings", "SPDXID": "SPDXRef-Package-go-module-github.com-huandu-xstrings-4195f6421c055c9c", "versionInfo": "v1.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:huandu:xstrings:v1.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/huandu/xstrings@v1.5.0"}]}, {"name": "github.com/iancoleman/strcase", "SPDXID": "SPDXRef-Package-go-module-github.com-iancoleman-strcase-f399af78f755b2e4", "versionInfo": "v0.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:iancoleman:strcase:v0.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/iancoleman/strcase@v0.3.0"}]}, {"name": "github.com/in-toto/attestation", "SPDXID": "SPDXRef-Package-go-module-github.com-in-toto-attestation-f23e1a4e9bf52620", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:in-toto:attestation:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:in_toto:attestation:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:in:attestation:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/in-toto/attestation@v1.2.0"}]}, {"name": "github.com/jbenet/go-context", "SPDXID": "SPDXRef-Package-go-module-github.com-jbenet-go-context-8f46b7b00852dc48", "versionInfo": "v0.0.0-20150711004518-d14ea06fba99", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jbenet:go-context:v0.0.0-20150711004518-d14ea06fba99:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jbenet:go_context:v0.0.0-20150711004518-d14ea06fba99:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jbenet/go-context@v0.0.0-20150711004518-d14ea06fba99"}]}, {"name": "github.com/jinzhu/copier", "SPDXID": "SPDXRef-Package-go-module-github.com-jinzhu-copier-d31f145c768c18f9", "versionInfo": "v0.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jinzhu:copier:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jinzhu/copier@v0.4.0"}]}, {"name": "github.com/jinzhu/inflection", "SPDXID": "SPDXRef-Package-go-module-github.com-jinzhu-inflection-40d8668794465355", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jinzhu:inflection:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jinzhu/inflection@v1.0.0"}]}, {"name": "github.com/jinzhu/now", "SPDXID": "SPDXRef-Package-go-module-github.com-jinzhu-now-5efff40d79682eed", "versionInfo": "v1.1.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jinzhu:now:v1.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jinzhu/now@v1.1.5"}]}, {"name": "github.com/json-iterator/go", "SPDXID": "SPDXRef-Package-go-module-github.com-json-iterator-go-695ca007779138d7", "versionInfo": "v1.1.12", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json-iterator:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json_iterator:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/json-iterator/go@v1.1.12"}]}, {"name": "github.com/kastenhq/goversion", "SPDXID": "SPDXRef-Package-go-module-github.com-kastenhq-goversion-7046ac81c76e966a", "versionInfo": "v0.0.0-20230811215019-93b2f8823953", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:kastenhq:goversion:v0.0.0-20230811215019-93b2f8823953:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/kastenhq/goversion@v0.0.0-20230811215019-93b2f8823953"}]}, {"name": "github.com/kevinburke/ssh_config", "SPDXID": "SPDXRef-Package-go-module-github.com-kevinburke-ssh-config-88a5f5810b8016c4", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:kevinburke:ssh-config:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:kevinburke:ssh_config:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/kevinburke/ssh_config@v1.2.0"}]}, {"name": "github.com/klauspost/compress", "SPDXID": "SPDXRef-Package-go-module-github.com-klauspost-compress-372ef7a0e2b2a35d", "versionInfo": "v1.20.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:klauspost:compress:v1.20.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/klauspost/compress@v1.20.0"}]}, {"name": "github.com/klauspost/cpuid/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-klauspost-cpuid-v2-1a404ab4af24d874", "versionInfo": "v2.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:klauspost:cpuid\\/v2:v2.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/klauspost/cpuid@v2.3.0#v2"}]}, {"name": "github.com/klauspost/pgzip", "SPDXID": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-0a62a330e8dca275", "versionInfo": "v1.2.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:klauspost:pgzip:v1.2.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/klauspost/pgzip@v1.2.6"}]}, {"name": "github.com/knqyf263/go-apk-version", "SPDXID": "SPDXRef-Package-go-module-github.com-knqyf263-go-apk-version-baf86a0eef263756", "versionInfo": "v0.0.0-20200609155635-041fdbb8563f", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:knqyf263:go-apk-version:v0.0.0-20200609155635-041fdbb8563f:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:knqyf263:go_apk_version:v0.0.0-20200609155635-041fdbb8563f:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/knqyf263/go-apk-version@v0.0.0-20200609155635-041fdbb8563f"}]}, {"name": "github.com/knqyf263/go-deb-version", "SPDXID": "SPDXRef-Package-go-module-github.com-knqyf263-go-deb-version-21754c8a5c6695ed", "versionInfo": "v0.0.0-20241115132648-6f4aee6ccd23", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:knqyf263:go-deb-version:v0.0.0-20241115132648-6f4aee6ccd23:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:knqyf263:go_deb_version:v0.0.0-20241115132648-6f4aee6ccd23:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/knqyf263/go-deb-version@v0.0.0-20241115132648-6f4aee6ccd23"}]}, {"name": "github.com/lucasb-eyer/go-colorful", "SPDXID": "SPDXRef-Package-go-module-github.com-lucasb-eyer-go-colorful-e652e081e258804c", "versionInfo": "v1.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb-eyer:go-colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb-eyer:go_colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb_eyer:go-colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb_eyer:go_colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb:go-colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb:go_colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/lucasb-eyer/go-colorful@v1.3.0"}]}, {"name": "github.com/masahiro331/go-mvn-version", "SPDXID": "SPDXRef-Package-go-module-github.com-masahiro331-go-mvn-version-b32abaa54faaf390", "versionInfo": "v0.0.0-20250131095131-f4974fa13b8a", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:masahiro331:go-mvn-version:v0.0.0-20250131095131-f4974fa13b8a:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:masahiro331:go_mvn_version:v0.0.0-20250131095131-f4974fa13b8a:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/masahiro331/go-mvn-version@v0.0.0-20250131095131-f4974fa13b8a"}]}, {"name": "github.com/mattn/go-colorable", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-e2694b7a76018f2e", "versionInfo": "v0.1.14", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-colorable:v0.1.14:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_colorable:v0.1.14:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-colorable@v0.1.14"}]}, {"name": "github.com/mattn/go-isatty", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-d8a09e3e30c91df5", "versionInfo": "v0.0.24", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-isatty:v0.0.24:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_isatty:v0.0.24:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-isatty@v0.0.24"}]}, {"name": "github.com/mattn/go-runewidth", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-7e0783c42e488939", "versionInfo": "v0.0.21", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-runewidth:v0.0.21:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_runewidth:v0.0.21:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-runewidth@v0.0.21"}]}, {"name": "github.com/mgutz/ansi", "SPDXID": "SPDXRef-Package-go-module-github.com-mgutz-ansi-2d49a3534cc873e4", "versionInfo": "v0.0.0-20200706080929-d51e80ef957d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mgutz:ansi:v0.0.0-20200706080929-d51e80ef957d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mgutz/ansi@v0.0.0-20200706080929-d51e80ef957d"}]}, {"name": "github.com/mholt/archives", "SPDXID": "SPDXRef-Package-go-module-github.com-mholt-archives-d0ae32ed0e95faa7", "versionInfo": "v0.1.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mholt:archives:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mholt/archives@v0.1.5"}]}, {"name": "github.com/mikelolasagasti/xz", "SPDXID": "SPDXRef-Package-go-module-github.com-mikelolasagasti-xz-48d77da2c8723037", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mikelolasagasti:xz:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mikelolasagasti/xz@v1.0.1"}]}, {"name": "github.com/minio/minlz", "SPDXID": "SPDXRef-Package-go-module-github.com-minio-minlz-37f7a8c87d069f0d", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:minio:minlz:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/minio/minlz@v1.0.1"}]}, {"name": "github.com/mitchellh/copystructure", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-6da57c7e7286c9a0", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:copystructure:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/copystructure@v1.2.0"}]}, {"name": "github.com/mitchellh/go-homedir", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-go-homedir-2474bc99e24853ae", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:go-homedir:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:go_homedir:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0"}]}, {"name": "github.com/mitchellh/go-wordwrap", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-462b688f9e9de469", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:go-wordwrap:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:go_wordwrap:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1"}]}, {"name": "github.com/mitchellh/reflectwalk", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-09e1c9f57c642aac", "versionInfo": "v1.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:reflectwalk:v1.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/reflectwalk@v1.0.2"}]}, {"name": "github.com/moby/docker-image-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-9b45f63a37baa16b", "versionInfo": "v1.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:docker-image-spec:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:docker_image_spec:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/docker-image-spec@v1.3.1"}]}, {"name": "github.com/moby/locker", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-locker-9ac1e298926f8680", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:locker:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/locker@v1.0.1"}]}, {"name": "github.com/moby/moby/api", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-moby-api-39436ee72a11f657", "versionInfo": "v1.56.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:moby\\/api:v1.56.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/moby@v1.56.0#api"}]}, {"name": "github.com/moby/moby/client", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-moby-client-9c15b03c4f5ee980", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:moby\\/client:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/moby@v0.6.0#client"}]}, {"name": "github.com/moby/sys/mountinfo", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-6b15df27ccb3e109", "versionInfo": "v0.7.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/mountinfo:v0.7.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.7.2#mountinfo"}]}, {"name": "github.com/moby/sys/signal", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-signal-29d004e54b616eba", "versionInfo": "v0.7.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/signal:v0.7.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.7.1#signal"}]}, {"name": "github.com/moby/sys/user", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-user-4cf490914ba7e9fe", "versionInfo": "v0.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/user:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.4.0#user"}]}, {"name": "github.com/moby/sys/userns", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-userns-34668564d691afa0", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/userns:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.1.0#userns"}]}, {"name": "github.com/modern-go/concurrent", "SPDXID": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-321e711a91bcd311", "versionInfo": "v0.0.0-20180306012644-bacd9c7ef1dd", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern-go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern_go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd"}]}, {"name": "github.com/modern-go/reflect2", "SPDXID": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-e75bf186727c8621", "versionInfo": "v1.0.3-0.20250322232337-35a7c28c31ee", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern-go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern_go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee"}]}, {"name": "github.com/muesli/ansi", "SPDXID": "SPDXRef-Package-go-module-github.com-muesli-ansi-dddfc1daec8c3b8f", "versionInfo": "v0.0.0-20230316100256-276c6243b2f6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:muesli:ansi:v0.0.0-20230316100256-276c6243b2f6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/muesli/ansi@v0.0.0-20230316100256-276c6243b2f6"}]}, {"name": "github.com/muesli/cancelreader", "SPDXID": "SPDXRef-Package-go-module-github.com-muesli-cancelreader-7e430e9f07d05ff6", "versionInfo": "v0.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:muesli:cancelreader:v0.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/muesli/cancelreader@v0.2.2"}]}, {"name": "github.com/muesli/termenv", "SPDXID": "SPDXRef-Package-go-module-github.com-muesli-termenv-1da55026bcea0658", "versionInfo": "v0.16.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:muesli:termenv:v0.16.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/muesli/termenv@v0.16.0"}]}, {"name": "github.com/nix-community/go-nix", "SPDXID": "SPDXRef-Package-go-module-github.com-nix-community-go-nix-e3745634f19e1967", "versionInfo": "v0.0.0-20250101154619-4bdde671e0a1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix-community:go-nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix-community:go_nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix_community:go-nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix_community:go_nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix:go-nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix:go_nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/nix-community/go-nix@v0.0.0-20250101154619-4bdde671e0a1"}]}, {"name": "github.com/nwaples/rardecode/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-nwaples-rardecode-v2-190d56abfd3f9fa6", "versionInfo": "v2.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nwaples:rardecode\\/v2:v2.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/nwaples/rardecode@v2.2.0#v2"}]}, {"name": "github.com/olekukonko/cat", "SPDXID": "SPDXRef-Package-go-module-github.com-olekukonko-cat-affc6299f590a1c6", "versionInfo": "v0.0.0-20250911104152-50322a0618f6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:olekukonko:cat:v0.0.0-20250911104152-50322a0618f6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/olekukonko/cat@v0.0.0-20250911104152-50322a0618f6"}]}, {"name": "github.com/olekukonko/errors", "SPDXID": "SPDXRef-Package-go-module-github.com-olekukonko-errors-18a61aca72f7aa70", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:olekukonko:errors:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/olekukonko/errors@v1.2.0"}]}, {"name": "github.com/olekukonko/ll", "SPDXID": "SPDXRef-Package-go-module-github.com-olekukonko-ll-b18725548579a1af", "versionInfo": "v0.1.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:olekukonko:ll:v0.1.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/olekukonko/ll@v0.1.6"}]}, {"name": "github.com/olekukonko/tablewriter", "SPDXID": "SPDXRef-Package-go-module-github.com-olekukonko-tablewriter-265b1d2bef7add1f", "versionInfo": "v1.1.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:olekukonko:tablewriter:v1.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/olekukonko/tablewriter@v1.1.4"}]}, {"name": "github.com/opencontainers/go-digest", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-957998c4d9458337", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:go-digest:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:go_digest:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0"}]}, {"name": "github.com/opencontainers/image-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-1d616cbd4098c9e1", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:image-spec:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:image_spec:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1"}]}, {"name": "github.com/opencontainers/runtime-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-8fa6bf13a44774e0", "versionInfo": "v1.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime-spec:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime_spec:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/runtime-spec@v1.3.0"}]}, {"name": "github.com/openvex/go-vex", "SPDXID": "SPDXRef-Package-go-module-github.com-openvex-go-vex-7495f19291887976", "versionInfo": "v0.2.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:openvex:go-vex:v0.2.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:openvex:go_vex:v0.2.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/openvex/go-vex@v0.2.8"}]}, {"name": "github.com/owenrumney/go-sarif", "SPDXID": "SPDXRef-Package-go-module-github.com-owenrumney-go-sarif-59763986900284d7", "versionInfo": "v1.1.2-0.20231003122901-1000f5e05554", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:owenrumney:go-sarif:v1.1.2-0.20231003122901-1000f5e05554:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:owenrumney:go_sarif:v1.1.2-0.20231003122901-1000f5e05554:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/owenrumney/go-sarif@v1.1.2-0.20231003122901-1000f5e05554"}]}, {"name": "github.com/package-url/packageurl-go", "SPDXID": "SPDXRef-Package-go-module-github.com-package-url-packageurl-go-1e113789d5f746f8", "versionInfo": "v0.1.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:package-url:packageurl-go:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:package-url:packageurl_go:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:package_url:packageurl-go:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:package_url:packageurl_go:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:package:packageurl-go:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:package:packageurl_go:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/package-url/packageurl-go@v0.1.5"}]}, {"name": "github.com/pandatix/go-cvss", "SPDXID": "SPDXRef-Package-go-module-github.com-pandatix-go-cvss-60706d75d1a6abcf", "versionInfo": "v0.6.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pandatix:go-cvss:v0.6.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pandatix:go_cvss:v0.6.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pandatix/go-cvss@v0.6.4"}]}, {"name": "github.com/pborman/indent", "SPDXID": "SPDXRef-Package-go-module-github.com-pborman-indent-1803aa6a67a1d654", "versionInfo": "v1.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pborman:indent:v1.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pborman/indent@v1.2.1"}]}, {"name": "github.com/pelletier/go-toml", "SPDXID": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-943e58a34acbf53d", "versionInfo": "v1.9.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pelletier:go-toml:v1.9.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pelletier:go_toml:v1.9.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pelletier/go-toml@v1.9.5"}]}, {"name": "github.com/pelletier/go-toml/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-6cbc51465f265d14", "versionInfo": "v2.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pelletier:go-toml\\/v2:v2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pelletier:go_toml\\/v2:v2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pelletier/go-toml@v2.4.3#v2"}]}, {"name": "github.com/pierrec/lz4/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-6986836f8412745c", "versionInfo": "v4.1.26", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pierrec:lz4\\/v4:v4.1.26:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pierrec/lz4@v4.1.26#v4"}]}, {"name": "github.com/piprate/json-gold", "SPDXID": "SPDXRef-Package-go-module-github.com-piprate-json-gold-0ab6417fc6c1da43", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:piprate:json-gold:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:piprate:json_gold:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/piprate/json-gold@v0.7.0"}]}, {"name": "github.com/pjbgf/sha1cd", "SPDXID": "SPDXRef-Package-go-module-github.com-pjbgf-sha1cd-e638712137282e0e", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pjbgf:sha1cd:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pjbgf/sha1cd@v0.6.0"}]}, {"name": "github.com/pkg/errors", "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-errors-7cda1f3cdf5d7b87", "versionInfo": "v0.9.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pkg/errors@v0.9.1"}]}, {"name": "github.com/pkg/profile", "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-profile-4907db64fbf51e41", "versionInfo": "v1.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pkg:profile:v1.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pkg/profile@v1.7.0"}]}, {"name": "github.com/pkg/xattr", "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-xattr-f23c6b9a97fba1db", "versionInfo": "v0.4.12", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pkg:xattr:v0.4.12:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pkg/xattr@v0.4.12"}]}, {"name": "github.com/pquerna/cachecontrol", "SPDXID": "SPDXRef-Package-go-module-github.com-pquerna-cachecontrol-11ddf1175af17aeb", "versionInfo": "v0.0.0-20180517163645-1555304b9b35", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pquerna:cachecontrol:v0.0.0-20180517163645-1555304b9b35:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pquerna/cachecontrol@v0.0.0-20180517163645-1555304b9b35"}]}, {"name": "github.com/remyoudompheng/bigfft", "SPDXID": "SPDXRef-Package-go-module-github.com-remyoudompheng-bigfft-bd7c0d5b6382c930", "versionInfo": "v0.0.0-20230129092748-24d4a6f8daec", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:remyoudompheng:bigfft:v0.0.0-20230129092748-24d4a6f8daec:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/remyoudompheng/bigfft@v0.0.0-20230129092748-24d4a6f8daec"}]}, {"name": "github.com/rivo/uniseg", "SPDXID": "SPDXRef-Package-go-module-github.com-rivo-uniseg-b7ced83ecd1f6a36", "versionInfo": "v0.4.7", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rivo:uniseg:v0.4.7:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/rivo/uniseg@v0.4.7"}]}, {"name": "github.com/rust-secure-code/go-rustaudit", "SPDXID": "SPDXRef-Package-go-module-github.com-rust-secure-code-go-rustaudit-9319d3660bdba7a0", "versionInfo": "v0.0.0-20250226111315-e20ec32e963c", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust-secure-code:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust-secure-code:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust_secure_code:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust_secure_code:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust-secure:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust-secure:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust_secure:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust_secure:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/rust-secure-code/go-rustaudit@v0.0.0-20250226111315-e20ec32e963c"}]}, {"name": "github.com/sagikazarmark/locafero", "SPDXID": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-929ad634e5b8eb4d", "versionInfo": "v0.11.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sagikazarmark:locafero:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sagikazarmark/locafero@v0.11.0"}]}, {"name": "github.com/saintfish/chardet", "SPDXID": "SPDXRef-Package-go-module-github.com-saintfish-chardet-f03fc3b6bf59513d", "versionInfo": "v0.0.0-20230101081208-5e3ef4b5456d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:saintfish:chardet:v0.0.0-20230101081208-5e3ef4b5456d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/saintfish/chardet@v0.0.0-20230101081208-5e3ef4b5456d"}]}, {"name": "github.com/santhosh-tekuri/jsonschema/v6", "SPDXID": "SPDXRef-Package-go-module-github.com-santhosh-tekuri-jsonschema-v6-054e3201801960d3", "versionInfo": "v6.0.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:santhosh-tekuri:jsonschema\\/v6:v6.0.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:santhosh_tekuri:jsonschema\\/v6:v6.0.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:santhosh:jsonschema\\/v6:v6.0.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/santhosh-tekuri/jsonschema@v6.0.3#v6"}]}, {"name": "github.com/sassoftware/go-rpmutils", "SPDXID": "SPDXRef-Package-go-module-github.com-sassoftware-go-rpmutils-eaed9182c259c641", "versionInfo": "v0.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sassoftware:go-rpmutils:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sassoftware:go_rpmutils:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sassoftware/go-rpmutils@v0.4.0"}]}, {"name": "github.com/scylladb/go-set", "SPDXID": "SPDXRef-Package-go-module-github.com-scylladb-go-set-2a1d051ac7d872ea", "versionInfo": "v1.0.3-0.20200225121959-cc7b2070d91e", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:scylladb:go-set:v1.0.3-0.20200225121959-cc7b2070d91e:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:scylladb:go_set:v1.0.3-0.20200225121959-cc7b2070d91e:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/scylladb/go-set@v1.0.3-0.20200225121959-cc7b2070d91e"}]}, {"name": "github.com/sergi/go-diff", "SPDXID": "SPDXRef-Package-go-module-github.com-sergi-go-diff-04a93a4c283a84cd", "versionInfo": "v1.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sergi:go-diff:v1.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sergi:go_diff:v1.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sergi/go-diff@v1.4.0"}]}, {"name": "github.com/shopspring/decimal", "SPDXID": "SPDXRef-Package-go-module-github.com-shopspring-decimal-4f889045f1c1e25c", "versionInfo": "v1.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:shopspring:decimal:v1.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/shopspring/decimal@v1.4.0"}]}, {"name": "github.com/sirupsen/logrus", "SPDXID": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-f017488955108537", "versionInfo": "v1.9.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sirupsen:logrus:v1.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sirupsen/logrus@v1.9.4"}]}, {"name": "github.com/skeema/knownhosts", "SPDXID": "SPDXRef-Package-go-module-github.com-skeema-knownhosts-872f3c4ed56c5329", "versionInfo": "v1.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:skeema:knownhosts:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/skeema/knownhosts@v1.3.1"}]}, {"name": "github.com/smallnest/ringbuffer", "SPDXID": "SPDXRef-Package-go-module-github.com-smallnest-ringbuffer-c5f4530daf013bd0", "versionInfo": "v0.0.0-20241116012123-461381446e3d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:smallnest:ringbuffer:v0.0.0-20241116012123-461381446e3d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/smallnest/ringbuffer@v0.0.0-20241116012123-461381446e3d"}]}, {"name": "github.com/sorairolake/lzip-go", "SPDXID": "SPDXRef-Package-go-module-github.com-sorairolake-lzip-go-6790a1fc7c4a7626", "versionInfo": "v0.3.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sorairolake:lzip-go:v0.3.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sorairolake:lzip_go:v0.3.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sorairolake/lzip-go@v0.3.8"}]}, {"name": "github.com/sourcegraph/conc", "SPDXID": "SPDXRef-Package-go-module-github.com-sourcegraph-conc-496288b2a3922a0e", "versionInfo": "v0.3.1-0.20240121214520-5f936abd7ae8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sourcegraph:conc:v0.3.1-0.20240121214520-5f936abd7ae8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sourcegraph/conc@v0.3.1-0.20240121214520-5f936abd7ae8"}]}, {"name": "github.com/spdx/gordf", "SPDXID": "SPDXRef-Package-go-module-github.com-spdx-gordf-f5233f5247411735", "versionInfo": "v0.0.0-20250128162952-000978ccd6fb", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spdx:gordf:v0.0.0-20250128162952-000978ccd6fb:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spdx/gordf@v0.0.0-20250128162952-000978ccd6fb"}]}, {"name": "github.com/spdx/tools-golang", "SPDXID": "SPDXRef-Package-go-module-github.com-spdx-tools-golang-5755da0efd945ef0", "versionInfo": "v0.6.0-rc4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spdx:tools-golang:v0.6.0-rc4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spdx:tools_golang:v0.6.0-rc4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spdx/tools-golang@v0.6.0-rc4"}]}, {"name": "github.com/spf13/afero", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-afero-bac3cd9eb4be88ce", "versionInfo": "v1.15.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:afero:v1.15.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/afero@v1.15.0"}]}, {"name": "github.com/spf13/cast", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-cast-ccf384dba9c98cd8", "versionInfo": "v1.10.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:cast:v1.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/cast@v1.10.0"}]}, {"name": "github.com/spf13/cobra", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-cobra-fe50cc660f2474c4", "versionInfo": "v1.10.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:cobra:v1.10.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/cobra@v1.10.2"}]}, {"name": "github.com/spf13/pflag", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-pflag-9235ab855bdeb8bb", "versionInfo": "v1.0.10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:pflag:v1.0.10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/pflag@v1.0.10"}]}, {"name": "github.com/spf13/viper", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-viper-7bf4d289532b959a", "versionInfo": "v1.21.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:viper:v1.21.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/viper@v1.21.0"}]}, {"name": "github.com/spiffe/go-spiffe/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-spiffe-go-spiffe-v2-54c3d99596800a45", "versionInfo": "v2.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spiffe:go-spiffe\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spiffe:go_spiffe\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spiffe/go-spiffe@v2.7.0#v2"}]}, {"name": "github.com/subosito/gotenv", "SPDXID": "SPDXRef-Package-go-module-github.com-subosito-gotenv-22a3ef71e0f2fce2", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:subosito:gotenv:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/subosito/gotenv@v1.6.0"}]}, {"name": "github.com/sylabs/sif/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-f2189310a6c49850", "versionInfo": "v2.24.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sylabs:sif\\/v2:v2.24.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sylabs/sif@v2.24.1#v2"}]}, {"name": "github.com/sylabs/squashfs", "SPDXID": "SPDXRef-Package-go-module-github.com-sylabs-squashfs-5cb3f0cb890222e7", "versionInfo": "v1.0.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sylabs:squashfs:v1.0.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sylabs/squashfs@v1.0.6"}]}, {"name": "github.com/tailscale/hujson", "SPDXID": "SPDXRef-Package-go-module-github.com-tailscale-hujson-1d6bc854352afb54", "versionInfo": "v0.0.0-20260302212456-ecc657c15afd", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tailscale:hujson:v0.0.0-20260302212456-ecc657c15afd:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/tailscale/hujson@v0.0.0-20260302212456-ecc657c15afd"}]}, {"name": "github.com/therootcompany/xz", "SPDXID": "SPDXRef-Package-go-module-github.com-therootcompany-xz-84fd5126d4a36dd7", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:therootcompany:xz:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/therootcompany/xz@v1.0.1"}]}, {"name": "github.com/ulikunitz/xz", "SPDXID": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-04fe982ec999f4b3", "versionInfo": "v0.5.16", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ulikunitz:xz:v0.5.16:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/ulikunitz/xz@v0.5.16"}]}, {"name": "github.com/vbatts/go-mtree", "SPDXID": "SPDXRef-Package-go-module-github.com-vbatts-go-mtree-255f9224834e9845", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbatts:go-mtree:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbatts:go_mtree:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vbatts/go-mtree@v0.7.0"}]}, {"name": "github.com/vifraa/gopom", "SPDXID": "SPDXRef-Package-go-module-github.com-vifraa-gopom-c9e526c37cbb3d94", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vifraa:gopom:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vifraa/gopom@v1.0.0"}]}, {"name": "github.com/wagoodman/go-partybus", "SPDXID": "SPDXRef-Package-go-module-github.com-wagoodman-go-partybus-25c44b4c1a48a849", "versionInfo": "v0.0.0-20230516145632-8ccac152c651", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:wagoodman:go-partybus:v0.0.0-20230516145632-8ccac152c651:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:wagoodman:go_partybus:v0.0.0-20230516145632-8ccac152c651:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/wagoodman/go-partybus@v0.0.0-20230516145632-8ccac152c651"}]}, {"name": "github.com/wagoodman/go-presenter", "SPDXID": "SPDXRef-Package-go-module-github.com-wagoodman-go-presenter-88d7354ec64b3a8a", "versionInfo": "v0.0.0-20211015174752-f9c01afc824b", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:wagoodman:go-presenter:v0.0.0-20211015174752-f9c01afc824b:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:wagoodman:go_presenter:v0.0.0-20211015174752-f9c01afc824b:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/wagoodman/go-presenter@v0.0.0-20211015174752-f9c01afc824b"}]}, {"name": "github.com/wagoodman/go-progress", "SPDXID": "SPDXRef-Package-go-module-github.com-wagoodman-go-progress-d9a2660825cba504", "versionInfo": "v0.0.0-20260303201901-10176f79b2c0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:wagoodman:go-progress:v0.0.0-20260303201901-10176f79b2c0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:wagoodman:go_progress:v0.0.0-20260303201901-10176f79b2c0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/wagoodman/go-progress@v0.0.0-20260303201901-10176f79b2c0"}]}, {"name": "github.com/xanzy/ssh-agent", "SPDXID": "SPDXRef-Package-go-module-github.com-xanzy-ssh-agent-a5f1728d49d8948f", "versionInfo": "v0.3.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:xanzy:ssh-agent:v0.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:xanzy:ssh_agent:v0.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/xanzy/ssh-agent@v0.3.3"}]}, {"name": "github.com/xi2/xz", "SPDXID": "SPDXRef-Package-go-module-github.com-xi2-xz-149db6cbc0a31f38", "versionInfo": "v0.0.0-20171230120015-48954b6210f8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:xi2:xz:v0.0.0-20171230120015-48954b6210f8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/xi2/xz@v0.0.0-20171230120015-48954b6210f8"}]}, {"name": "github.com/xo/terminfo", "SPDXID": "SPDXRef-Package-go-module-github.com-xo-terminfo-f85b11397208b620", "versionInfo": "v0.0.0-20220910002029-abceb7e1c41e", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:xo:terminfo:v0.0.0-20220910002029-abceb7e1c41e:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/xo/terminfo@v0.0.0-20220910002029-abceb7e1c41e"}]}, {"name": "github.com/zclconf/go-cty", "SPDXID": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-96ff370709f5c488", "versionInfo": "v1.16.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zclconf:go-cty:v1.16.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zclconf:go_cty:v1.16.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/zclconf/go-cty@v1.16.3"}]}, {"name": "github.com/zyedidia/generic", "SPDXID": "SPDXRef-Package-go-module-github.com-zyedidia-generic-27edf3f4d6373a5c", "versionInfo": "v1.2.2-0.20230320175451-4410d2372cb1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zyedidia:generic:v1.2.2-0.20230320175451-4410d2372cb1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/zyedidia/generic@v1.2.2-0.20230320175451-4410d2372cb1"}]}, {"name": "go.etcd.io/bbolt", "SPDXID": "SPDXRef-Package-go-module-go.etcd.io-bbolt-8847a227a1874d09", "versionInfo": "v1.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.etcd.io/bbolt@v1.4.3"}]}, {"name": "go.opentelemetry.io/auto/sdk", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-b62280c82ba92a85", "versionInfo": "v1.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:auto:sdk:v1.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1"}]}, {"name": "go.opentelemetry.io/contrib/detectors/gcp", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-detectors-gcp-f78bd2ed2f59d4a7", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contrib:detectors\\/gcp:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/detectors@v1.44.0#gcp"}]}, {"name": "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-f7711b9cf0a68927", "versionInfo": "v0.68.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/google.golang.org\\/grpc\\/otelgrpc:v0.68.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation@v0.68.0#google.golang.org/grpc/otelgrpc"}]}, {"name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-8a26d27741341332", "versionInfo": "v0.68.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/otelhttp:v0.68.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation@v0.68.0#net/http/otelhttp"}]}, {"name": "go.opentelemetry.io/otel", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-18d21eac669ad38e", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel@v1.44.0"}]}, {"name": "go.opentelemetry.io/otel/metric", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-7b7b0ab24f8b3f77", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:metric:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/metric@v1.44.0"}]}, {"name": "go.opentelemetry.io/otel/sdk", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-3f75ea4ff7330f60", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:sdk:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.44.0"}]}, {"name": "go.opentelemetry.io/otel/sdk/metric", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-18825e3bdfe6fb30", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:sdk\\/metric:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.44.0#metric"}]}, {"name": "go.opentelemetry.io/otel/trace", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-9e6de060436fb613", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:trace:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/trace@v1.44.0"}]}, {"name": "go.yaml.in/yaml/v3", "SPDXID": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-cfe722c8599fd009", "versionInfo": "v3.0.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml:v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.yaml.in/yaml/v3@v3.0.5"}]}, {"name": "go4.org", "SPDXID": "SPDXRef-Package-go-module-go4.org-addb87b09a71c98b", "versionInfo": "v0.0.0-20230225012048-214862532bf5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go4.org@v0.0.0-20230225012048-214862532bf5"}]}, {"name": "golang.org/x/crypto", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-crypto-06665ac51a8b05dd", "versionInfo": "v0.56.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:ssh:v0.56.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/crypto@v0.56.0"}]}, {"name": "golang.org/x/exp", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-exp-438fece4cf9d6e66", "versionInfo": "v0.0.0-20260410095643-746e56fc9e2f", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/exp:v0.0.0-20260410095643-746e56fc9e2f:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/exp@v0.0.0-20260410095643-746e56fc9e2f"}]}, {"name": "golang.org/x/mod", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-mod-8403c0075d718fe1", "versionInfo": "v0.41.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/mod:v0.41.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/mod@v0.41.0"}]}, {"name": "golang.org/x/net", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-net-e587b86c098543c6", "versionInfo": "v0.58.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:networking:v0.58.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/net@v0.58.0"}]}, {"name": "golang.org/x/oauth2", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-oauth2-d2707f1fb017a62b", "versionInfo": "v0.36.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/oauth2:v0.36.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/oauth2@v0.36.0"}]}, {"name": "golang.org/x/sync", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sync-b28f1de83b33f1b6", "versionInfo": "v0.22.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sync:v0.22.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sync@v0.22.0"}]}, {"name": "golang.org/x/sys", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sys-dd1eefc7392cbef3", "versionInfo": "v0.47.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sys:v0.47.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sys@v0.47.0"}]}, {"name": "golang.org/x/term", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-term-6a5672ca65714127", "versionInfo": "v0.45.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/term:v0.45.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/term@v0.45.0"}]}, {"name": "golang.org/x/text", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-text-8ea585f2a9cf5309", "versionInfo": "v0.41.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:text:v0.41.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/text@v0.41.0"}]}, {"name": "golang.org/x/time", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-time-5cd6fcf1b237cb60", "versionInfo": "v0.16.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/time:v0.16.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/time@v0.16.0"}]}, {"name": "golang.org/x/tools", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-tools-b8c9f82a47bddc38", "versionInfo": "v0.49.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/tools:v0.49.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/tools@v0.49.0"}]}, {"name": "golang.org/x/xerrors", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-xerrors-e2149f3fcd2c04ca", "versionInfo": "v0.0.0-20240903120638-7835f813f4da", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/xerrors:v0.0.0-20240903120638-7835f813f4da:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/xerrors@v0.0.0-20240903120638-7835f813f4da"}]}, {"name": "google.golang.org/api", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-api-1ba18d0b64952633", "versionInfo": "v0.294.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:api:v0.294.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/api@v0.294.0"}]}, {"name": "google.golang.org/genproto", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-9b2b3c8e51067d84", "versionInfo": "v0.0.0-20260715232425-e75dac1f907d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260715232425-e75dac1f907d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto@v0.0.0-20260715232425-e75dac1f907d"}]}, {"name": "google.golang.org/genproto/googleapis/api", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-d5a37776637d1cd6", "versionInfo": "v0.0.0-20260715232425-e75dac1f907d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260715232425-e75dac1f907d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260715232425-e75dac1f907d#api"}]}, {"name": "google.golang.org/genproto/googleapis/rpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-da0e7a7f5462a9a8", "versionInfo": "v0.0.0-20260819154853-08b0e4226688", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260819154853-08b0e4226688:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260819154853-08b0e4226688#rpc"}]}, {"name": "google.golang.org/grpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-grpc-f2e8a623d2aae506", "versionInfo": "v1.83.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:grpc:v1.83.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/grpc@v1.83.2"}]}, {"name": "google.golang.org/protobuf", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-protobuf-192c756afc1b4b18", "versionInfo": "v1.36.12", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:protobuf:v1.36.12:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/protobuf@v1.36.12"}]}, {"name": "gopkg.in/warnings.v0", "SPDXID": "SPDXRef-Package-go-module-gopkg.in-warnings.v0-f2df787e7063216b", "versionInfo": "v0.1.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/gopkg.in/warnings.v0@v0.1.2"}]}, {"name": "gopkg.in/yaml.v3", "SPDXID": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-bd5711e95002750c", "versionInfo": "v3.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml_project:yaml:v3.0.1:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/gopkg.in/yaml.v3@v3.0.1"}]}, {"name": "gorm.io/gorm", "SPDXID": "SPDXRef-Package-go-module-gorm.io-gorm-13e7b307c936fad1", "versionInfo": "v1.31.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/gorm.io/gorm@v1.31.2"}]}, {"name": "grype", "SPDXID": "SPDXRef-Package-rpm-grype-37e92664271a3d41", "versionInfo": "0.119.0-0.2.hum1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from RPM DB: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grype:grype:0.119.0-0.2.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/hummingbird/grype@0.119.0-0.2.hum1?distro=hummingbird-1"}]}, {"name": "howett.net/plist", "SPDXID": "SPDXRef-Package-go-module-howett.net-plist-f5d814ef8dae0279", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/howett.net/plist@v1.0.1"}]}, {"name": "modernc.org/libc", "SPDXID": "SPDXRef-Package-go-module-modernc.org-libc-a8b40b70bf32ff0a", "versionInfo": "v1.75.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/modernc.org/libc@v1.75.6"}]}, {"name": "modernc.org/mathutil", "SPDXID": "SPDXRef-Package-go-module-modernc.org-mathutil-c4fff7a380580297", "versionInfo": "v1.7.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/modernc.org/mathutil@v1.7.1"}]}, {"name": "modernc.org/memory", "SPDXID": "SPDXRef-Package-go-module-modernc.org-memory-b46da2eb81199211", "versionInfo": "v1.12.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/modernc.org/memory@v1.12.1"}]}, {"name": "modernc.org/sqlite", "SPDXID": "SPDXRef-Package-go-module-modernc.org-sqlite-949c9d905f550466", "versionInfo": "v1.58.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/modernc.org/sqlite@v1.58.0"}]}, {"name": "stdlib", "SPDXID": "SPDXRef-Package-go-module-stdlib-765c93b72a178fff", "versionInfo": "go1.27.2-X:nodwarf5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:go:1.27.2:-:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/stdlib@1.27.2-X%3Anodwarf5"}]}, {"name": "rpm-extracted/grype-0.119.0-0.2.hum1.aarch64", "SPDXID": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "./.github/actions/bootstrap", "SPDXID": "SPDXRef-Package-github-action-.-.github-actions-bootstrap-8956e6c98cc9c76e", "versionInfo": "UNKNOWN", "supplier": "Organization: .", "originator": "Organization: .", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /grype-0.119.0/.github/workflows/release.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:.\\/.github\\/actions\\/bootstrap:.\\/.github\\/actions\\/bootstrap:*:*:*:*:*:*:*:*"}]}, {"name": "./.github/actions/bootstrap", "SPDXID": "SPDXRef-Package-github-action-.-.github-actions-bootstrap-fe2a7dfdfcfcd11a", "versionInfo": "UNKNOWN", "supplier": "Organization: .", "originator": "Organization: .", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /grype-0.119.0/.github/workflows/validations.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:.\\/.github\\/actions\\/bootstrap:.\\/.github\\/actions\\/bootstrap:*:*:*:*:*:*:*:*"}]}, {"name": "AWSSDK.Core", "SPDXID": "SPDXRef-Package-dotnet-AWSSDK.Core-8e7a0987c8b015fd", "versionInfo": "3.7.10.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from dotnet project assets file: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/dotnet/TestLibrary.deps.json", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:awssdk_core:awssdk_core_.net:3.7.10.6:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:awssdk_core:awssdk_core:3.7.10.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:nuget/AWSSDK.Core@3.7.10.6"}]}, {"name": "Cabal", "SPDXID": "SPDXRef-Package-hackage-Cabal-d81b0adcb28dbe75", "versionInfo": "3.2.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from cabal or stack manifest files: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/haskell/cabal.project.freeze", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Cabal:Cabal:3.2.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:hackage/Cabal@3.2.1.0"}]}, {"name": "Diff", "SPDXID": "SPDXRef-Package-hackage-Diff-38843e84cb58524e", "versionInfo": "0.4.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from cabal or stack manifest files: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/haskell/cabal.project.freeze", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Diff:Diff:0.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:hackage/Diff@0.4.1"}]}, {"name": "HTTP", "SPDXID": "SPDXRef-Package-hackage-HTTP-a04bfb423cd4e5bd", "versionInfo": "4000.3.16", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from cabal or stack manifest files: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/haskell/cabal.project.freeze", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:HTTP:HTTP:4000.3.16:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:hackage/HTTP@4000.3.16"}]}, {"name": "HTTP", "SPDXID": "SPDXRef-Package-hackage-HTTP-55a45cfeed478a3f", "versionInfo": "4000.3.16", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from cabal or stack manifest files: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/haskell/stack.yaml.lock", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:HTTP:HTTP:4000.3.16:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:hackage/HTTP@4000.3.16"}]}, {"name": "HUnit", "SPDXID": "SPDXRef-Package-hackage-HUnit-31160b35319dd704", "versionInfo": "1.6.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from cabal or stack manifest files: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/haskell/cabal.project.freeze", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:HUnit:HUnit:1.6.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:hackage/HUnit@1.6.2.0"}]}, {"name": "Microsoft.Extensions.DependencyInjection", "SPDXID": "SPDXRef-Package-dotnet-Microsoft.Extensions.DependencyInjection-f1997feaecac0ce6", "versionInfo": "6.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from dotnet project assets file: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/dotnet/TestLibrary.deps.json", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:microsoft_extensions_dependencyinjection:microsoft_extensions_dependencyinjection_.net:6.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:microsoft_extensions_dependencyinjection:microsoft_extensions_dependencyinjection:6.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:nuget/Microsoft.Extensions.DependencyInjection@6.0.0"}]}, {"name": "Microsoft.Extensions.DependencyInjection.Abstractions", "SPDXID": "SPDXRef-Package-dotnet-Microsoft.Extensions.DependencyInjection.Abstractions-7059ca95fdc96525", "versionInfo": "6.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from dotnet project assets file: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/dotnet/TestLibrary.deps.json", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:microsoft_extensions_dependencyinjection_abstractions:microsoft_extensions_dependencyinjection_abstractions_.net:6.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:microsoft_extensions_dependencyinjection_abstractions:microsoft_extensions_dependencyinjection_abstractions:6.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:nuget/Microsoft.Extensions.DependencyInjection.Abstractions@6.0.0"}]}, {"name": "Microsoft.Extensions.Logging", "SPDXID": "SPDXRef-Package-dotnet-Microsoft.Extensions.Logging-2c9972b4a182c6e4", "versionInfo": "6.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from dotnet project assets file: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/dotnet/TestLibrary.deps.json", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:microsoft_extensions_logging:microsoft_extensions_logging_.net:6.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:microsoft_extensions_logging:microsoft_extensions_logging:6.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:nuget/Microsoft.Extensions.Logging@6.0.0"}]}, {"name": "Microsoft.Extensions.Logging.Abstractions", "SPDXID": "SPDXRef-Package-dotnet-Microsoft.Extensions.Logging.Abstractions-4e22cf2bcfe9455c", "versionInfo": "6.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from dotnet project assets file: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/dotnet/TestLibrary.deps.json", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:microsoft_extensions_logging_abstractions:microsoft_extensions_logging_abstractions_.net:6.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:microsoft_extensions_logging_abstractions:microsoft_extensions_logging_abstractions:6.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:nuget/Microsoft.Extensions.Logging.Abstractions@6.0.0"}]}, {"name": "Microsoft.Extensions.Options", "SPDXID": "SPDXRef-Package-dotnet-Microsoft.Extensions.Options-c567666f1d3eabf3", "versionInfo": "6.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from dotnet project assets file: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/dotnet/TestLibrary.deps.json", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:microsoft_extensions_options:microsoft_extensions_options_.net:6.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:microsoft_extensions_options:microsoft_extensions_options:6.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:nuget/Microsoft.Extensions.Options@6.0.0"}]}, {"name": "Microsoft.Extensions.Primitives", "SPDXID": "SPDXRef-Package-dotnet-Microsoft.Extensions.Primitives-0e65bdf9a3c51500", "versionInfo": "6.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from dotnet project assets file: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/dotnet/TestLibrary.deps.json", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:microsoft_extensions_primitives:microsoft_extensions_primitives_.net:6.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:microsoft_extensions_primitives:microsoft_extensions_primitives:6.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:nuget/Microsoft.Extensions.Primitives@6.0.0"}]}, {"name": "Newtonsoft.Json", "SPDXID": "SPDXRef-Package-dotnet-Newtonsoft.Json-513f38c30b10f650", "versionInfo": "13.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from dotnet project assets file: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/dotnet/TestLibrary.deps.json", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:newtonsoft_json:newtonsoft_json_.net:13.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:newtonsoft_json:newtonsoft_json:13.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:nuget/Newtonsoft.Json@13.0.1"}]}, {"name": "OneTuple", "SPDXID": "SPDXRef-Package-hackage-OneTuple-7a0cc949cd177235", "versionInfo": "0.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from cabal or stack manifest files: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/haskell/cabal.project.freeze", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:OneTuple:OneTuple:0.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:hackage/OneTuple@0.3.1"}]}, {"name": "Only", "SPDXID": "SPDXRef-Package-hackage-Only-dcadd0fa648dfa04", "versionInfo": "0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from cabal or stack manifest files: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/haskell/cabal.project.freeze", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Only:Only:0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:hackage/Only@0.1"}]}, {"name": "PyF", "SPDXID": "SPDXRef-Package-hackage-PyF-25c350a6b69e7297", "versionInfo": "0.10.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from cabal or stack manifest files: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/haskell/cabal.project.freeze", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:PyF:PyF:0.10.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:hackage/PyF@0.10.2.0"}]}, {"name": "QuickCheck", "SPDXID": "SPDXRef-Package-hackage-QuickCheck-996cd0eb5b1dc7ec", "versionInfo": "2.14.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from cabal or stack manifest files: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/haskell/cabal.project.freeze", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:QuickCheck:QuickCheck:2.14.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:hackage/QuickCheck@2.14.2"}]}, {"name": "RSA", "SPDXID": "SPDXRef-Package-hackage-RSA-192809b5e448215d", "versionInfo": "2.4.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from cabal or stack manifest files: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/haskell/cabal.project.freeze", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:RSA:RSA:2.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:hackage/RSA@2.4.1"}]}, {"name": "SHA", "SPDXID": "SPDXRef-Package-hackage-SHA-baed4c25dd9aaa11", "versionInfo": "1.6.4.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from cabal or stack manifest files: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/haskell/cabal.project.freeze", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:SHA:SHA:1.6.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:hackage/SHA@1.6.4.4"}]}, {"name": "Serilog", "SPDXID": "SPDXRef-Package-dotnet-Serilog-b7113daa72cb3644", "versionInfo": "2.10.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from dotnet project assets file: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/dotnet/TestLibrary.deps.json", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:serilog:serilog_.net:2.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:serilog:serilog:2.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:nuget/Serilog@2.10.0"}]}, {"name": "Serilog.Sinks.Console", "SPDXID": "SPDXRef-Package-dotnet-Serilog.Sinks.Console-428ca9e2778d8a6f", "versionInfo": "4.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from dotnet project assets file: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/dotnet/TestLibrary.deps.json", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:serilog_sinks_console:serilog_sinks_console_.net:4.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:serilog_sinks_console:serilog_sinks_console:4.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:nuget/Serilog.Sinks.Console@4.0.1"}]}, {"name": "ShellCheck", "SPDXID": "SPDXRef-Package-hackage-ShellCheck-b42715fd69470b2f", "versionInfo": "0.8.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from cabal or stack manifest files: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/haskell/stack.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ShellCheck:ShellCheck:0.8.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:hackage/ShellCheck@0.8.0"}]}, {"name": "Spock", "SPDXID": "SPDXRef-Package-hackage-Spock-29efad8c122541e6", "versionInfo": "0.14.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from cabal or stack manifest files: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/haskell/cabal.project.freeze", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Spock:Spock:0.14.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:hackage/Spock@0.14.0.0"}]}, {"name": "TestCommon", "SPDXID": "SPDXRef-Package-dotnet-TestCommon-ae2cc3cff261601c", "versionInfo": "1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from dotnet project assets file: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/dotnet/TestLibrary.deps.json", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:testcommon:testcommon_.net:1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:testcommon:testcommon:1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:nuget/TestCommon@1.0.0"}]}, {"name": "TestLibrary", "SPDXID": "SPDXRef-Package-dotnet-TestLibrary-b5f66243fe64203d", "versionInfo": "1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from dotnet project assets file: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/dotnet/TestLibrary.deps.json", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:testlibrary:testlibrary_.net:1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:testlibrary:testlibrary:1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:nuget/TestLibrary@1.0.0"}]}, {"name": "actions/cache", "SPDXID": "SPDXRef-Package-github-action-actions-cache-e5f604f7f400ff50", "versionInfo": "55cc8345863c7cc4c66a329aec7e433d2d1c52a9", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /grype-0.119.0/.github/actions/bootstrap/action.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/cache:actions\\/cache:55cc8345863c7cc4c66a329aec7e433d2d1c52a9:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9"}]}, {"name": "actions/cache", "SPDXID": "SPDXRef-Package-github-action-actions-cache-56bec8cbbf261603", "versionInfo": "v6.1.0", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /grype-0.119.0/.github/workflows/validations.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/cache:actions\\/cache:v6.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/cache@v6.1.0"}]}, {"name": "actions/cache/restore", "SPDXID": "SPDXRef-Package-github-action-actions-cache-restore-e853b1285489ab14", "versionInfo": "55cc8345863c7cc4c66a329aec7e433d2d1c52a9", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /grype-0.119.0/.github/actions/bootstrap/action.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/cache\\/restore:actions\\/cache\\/restore:55cc8345863c7cc4c66a329aec7e433d2d1c52a9:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9#restore"}]}, {"name": "actions/checkout", "SPDXID": "SPDXRef-Package-github-action-actions-checkout-6d6bc3b5b2f32b00", "versionInfo": "v7.0.1", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /grype-0.119.0/.github/workflows/release.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/checkout@v7.0.1"}]}, {"name": "actions/checkout", "SPDXID": "SPDXRef-Package-github-action-actions-checkout-9a0e6b39a6bba50e", "versionInfo": "v7.0.1", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /grype-0.119.0/.github/workflows/scorecards.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/checkout@v7.0.1"}]}, {"name": "actions/checkout", "SPDXID": "SPDXRef-Package-github-action-actions-checkout-a7771f8c09ba063b", "versionInfo": "v7.0.1", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /grype-0.119.0/.github/workflows/validate-github-actions.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/checkout@v7.0.1"}]}, {"name": "actions/checkout", "SPDXID": "SPDXRef-Package-github-action-actions-checkout-3f9a0fbf14a5bdc4", "versionInfo": "v7.0.1", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /grype-0.119.0/.github/workflows/validations.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/checkout@v7.0.1"}]}, {"name": "actions/download-artifact", "SPDXID": "SPDXRef-Package-github-action-actions-download-artifact-8c8cae86d32194e4", "versionInfo": "v8.0.1", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /grype-0.119.0/.github/workflows/validations.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/download-artifact:actions\\/download-artifact:v8.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/download-artifact:actions\\/download_artifact:v8.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/download_artifact:actions\\/download-artifact:v8.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/download_artifact:actions\\/download_artifact:v8.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/download:actions\\/download-artifact:v8.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/download:actions\\/download_artifact:v8.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/download-artifact@v8.0.1"}]}, {"name": "actions/setup-python", "SPDXID": "SPDXRef-Package-github-action-actions-setup-python-097c0506c599a1b5", "versionInfo": "5fda3b95a4ea91299a34e894583c3862153e4b97", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /grype-0.119.0/.github/actions/bootstrap/action.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup-python:actions\\/setup-python:5fda3b95a4ea91299a34e894583c3862153e4b97:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup-python:actions\\/setup_python:5fda3b95a4ea91299a34e894583c3862153e4b97:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup_python:actions\\/setup-python:5fda3b95a4ea91299a34e894583c3862153e4b97:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup_python:actions\\/setup_python:5fda3b95a4ea91299a34e894583c3862153e4b97:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup:actions\\/setup-python:5fda3b95a4ea91299a34e894583c3862153e4b97:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup:actions\\/setup_python:5fda3b95a4ea91299a34e894583c3862153e4b97:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97"}]}, {"name": "actions/upload-artifact", "SPDXID": "SPDXRef-Package-github-action-actions-upload-artifact-00a212884b440034", "versionInfo": "v7.0.1", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /grype-0.119.0/.github/workflows/validations.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/upload-artifact@v7.0.1"}]}, {"name": "anchore/go-make/.github/actions/setup", "SPDXID": "SPDXRef-Package-github-action-anchore-go-make-.github-actions-setup-e1c0652de56d1950", "versionInfo": "430e2175bb166bfd138ef75466adbcc8ddab875f", "supplier": "Organization: anchore", "originator": "Organization: anchore", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /grype-0.119.0/.github/actions/bootstrap/action.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/go-make\\/.github\\/actions\\/setup:anchore\\/go-make\\/.github\\/actions\\/setup:430e2175bb166bfd138ef75466adbcc8ddab875f:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/go-make\\/.github\\/actions\\/setup:anchore\\/go_make\\/.github\\/actions\\/setup:430e2175bb166bfd138ef75466adbcc8ddab875f:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/go_make\\/.github\\/actions\\/setup:anchore\\/go-make\\/.github\\/actions\\/setup:430e2175bb166bfd138ef75466adbcc8ddab875f:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/go_make\\/.github\\/actions\\/setup:anchore\\/go_make\\/.github\\/actions\\/setup:430e2175bb166bfd138ef75466adbcc8ddab875f:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/go:anchore\\/go-make\\/.github\\/actions\\/setup:430e2175bb166bfd138ef75466adbcc8ddab875f:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/go:anchore\\/go_make\\/.github\\/actions\\/setup:430e2175bb166bfd138ef75466adbcc8ddab875f:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/anchore/go-make@430e2175bb166bfd138ef75466adbcc8ddab875f#.github/actions/setup"}]}, {"name": "anchore/sbom-action", "SPDXID": "SPDXRef-Package-github-action-anchore-sbom-action-ca892260c3eeccf9", "versionInfo": "v0.24.2", "supplier": "Organization: anchore", "originator": "Organization: anchore", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /grype-0.119.0/.github/workflows/release.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/sbom-action:anchore\\/sbom-action:v0.24.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/sbom-action:anchore\\/sbom_action:v0.24.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/sbom_action:anchore\\/sbom-action:v0.24.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/sbom_action:anchore\\/sbom_action:v0.24.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/sbom:anchore\\/sbom-action:v0.24.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/sbom:anchore\\/sbom_action:v0.24.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/anchore/sbom-action@v0.24.2"}]}, {"name": "anchore/workflows/.github/workflows/check-gate.yaml", "SPDXID": "SPDXRef-Package-github-action-workflow-anchore-workflows-.github-workflows-check-gate.yaml-ee68913fdcacc281", "versionInfo": "v0.8.0", "supplier": "Organization: anchore", "originator": "Organization: anchore", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /grype-0.119.0/.github/workflows/release.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/workflows\\/.github\\/workflows\\/check-gate.yaml:anchore\\/workflows\\/.github\\/workflows\\/check-gate.yaml:v0.8.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/workflows\\/.github\\/workflows\\/check-gate.yaml:anchore\\/workflows\\/.github\\/workflows\\/check_gate.yaml:v0.8.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/workflows\\/.github\\/workflows\\/check_gate.yaml:anchore\\/workflows\\/.github\\/workflows\\/check-gate.yaml:v0.8.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/workflows\\/.github\\/workflows\\/check_gate.yaml:anchore\\/workflows\\/.github\\/workflows\\/check_gate.yaml:v0.8.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/workflows\\/.github\\/workflows\\/check:anchore\\/workflows\\/.github\\/workflows\\/check-gate.yaml:v0.8.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/workflows\\/.github\\/workflows\\/check:anchore\\/workflows\\/.github\\/workflows\\/check_gate.yaml:v0.8.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/anchore/workflows@v0.8.0#.github/workflows/check-gate.yaml"}]}, {"name": "anchore/workflows/.github/workflows/check-version-available.yaml", "SPDXID": "SPDXRef-Package-github-action-workflow-anchore-workflows-.github-workflows-check-version-available.yaml-0a4c6c1fe2e4b66a", "versionInfo": "v0.8.0", "supplier": "Organization: anchore", "originator": "Organization: anchore", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /grype-0.119.0/.github/workflows/release.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/workflows\\/.github\\/workflows\\/check-version-available.yaml:anchore\\/workflows\\/.github\\/workflows\\/check-version-available.yaml:v0.8.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/workflows\\/.github\\/workflows\\/check-version-available.yaml:anchore\\/workflows\\/.github\\/workflows\\/check_version_available.yaml:v0.8.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/workflows\\/.github\\/workflows\\/check_version_available.yaml:anchore\\/workflows\\/.github\\/workflows\\/check-version-available.yaml:v0.8.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/workflows\\/.github\\/workflows\\/check_version_available.yaml:anchore\\/workflows\\/.github\\/workflows\\/check_version_available.yaml:v0.8.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/workflows\\/.github\\/workflows\\/check-version:anchore\\/workflows\\/.github\\/workflows\\/check-version-available.yaml:v0.8.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/workflows\\/.github\\/workflows\\/check-version:anchore\\/workflows\\/.github\\/workflows\\/check_version_available.yaml:v0.8.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/workflows\\/.github\\/workflows\\/check_version:anchore\\/workflows\\/.github\\/workflows\\/check-version-available.yaml:v0.8.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/workflows\\/.github\\/workflows\\/check_version:anchore\\/workflows\\/.github\\/workflows\\/check_version_available.yaml:v0.8.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/workflows\\/.github\\/workflows\\/check:anchore\\/workflows\\/.github\\/workflows\\/check-version-available.yaml:v0.8.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/workflows\\/.github\\/workflows\\/check:anchore\\/workflows\\/.github\\/workflows\\/check_version_available.yaml:v0.8.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/anchore/workflows@v0.8.0#.github/workflows/check-version-available.yaml"}]}, {"name": "anchore/workflows/.github/workflows/codeql.yaml", "SPDXID": "SPDXRef-Package-github-action-workflow-anchore-workflows-.github-workflows-codeql.yaml-0bff96f8231700d7", "versionInfo": "v0.8.0", "supplier": "Organization: anchore", "originator": "Organization: anchore", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /grype-0.119.0/.github/workflows/codeql.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/workflows\\/.github\\/workflows\\/codeql.yaml:anchore\\/workflows\\/.github\\/workflows\\/codeql.yaml:v0.8.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/anchore/workflows@v0.8.0#.github/workflows/codeql.yaml"}]}, {"name": "anchore/workflows/.github/workflows/release-install-script.yaml", "SPDXID": "SPDXRef-Package-github-action-workflow-anchore-workflows-.github-workflows-release-install-script.yaml-4d9c0cd0067bb2ee", "versionInfo": "v0.8.0", "supplier": "Organization: anchore", "originator": "Organization: anchore", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /grype-0.119.0/.github/workflows/release.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/workflows\\/.github\\/workflows\\/release-install-script.yaml:anchore\\/workflows\\/.github\\/workflows\\/release-install-script.yaml:v0.8.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/workflows\\/.github\\/workflows\\/release-install-script.yaml:anchore\\/workflows\\/.github\\/workflows\\/release_install_script.yaml:v0.8.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/workflows\\/.github\\/workflows\\/release_install_script.yaml:anchore\\/workflows\\/.github\\/workflows\\/release-install-script.yaml:v0.8.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/workflows\\/.github\\/workflows\\/release_install_script.yaml:anchore\\/workflows\\/.github\\/workflows\\/release_install_script.yaml:v0.8.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/workflows\\/.github\\/workflows\\/release-install:anchore\\/workflows\\/.github\\/workflows\\/release-install-script.yaml:v0.8.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/workflows\\/.github\\/workflows\\/release-install:anchore\\/workflows\\/.github\\/workflows\\/release_install_script.yaml:v0.8.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/workflows\\/.github\\/workflows\\/release_install:anchore\\/workflows\\/.github\\/workflows\\/release-install-script.yaml:v0.8.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/workflows\\/.github\\/workflows\\/release_install:anchore\\/workflows\\/.github\\/workflows\\/release_install_script.yaml:v0.8.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/workflows\\/.github\\/workflows\\/release:anchore\\/workflows\\/.github\\/workflows\\/release-install-script.yaml:v0.8.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore\\/workflows\\/.github\\/workflows\\/release:anchore\\/workflows\\/.github\\/workflows\\/release_install_script.yaml:v0.8.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/anchore/workflows@v0.8.0#.github/workflows/release-install-script.yaml"}]}, {"name": "app-containers/skopeo", "SPDXID": "SPDXRef-Package-portage-app-containers-skopeo-ebf792934094fc8d", "versionInfo": "1.5.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from portage DB: /grype-0.119.0/test/integration/testdata/image-portage-match-coverage/var/db/pkg/app-containers/skopeo-1.5.1/CONTENTS, /grype-0.119.0/test/integration/testdata/image-portage-match-coverage/var/db/pkg/app-containers/skopeo-1.5.1/LICENSE, /grype-0.119.0/test/integration/testdata/image-portage-match-coverage/var/db/pkg/app-containers/skopeo-1.5.1/SIZE", "licenseConcluded": "NOASSERTION", "licenseDeclared": "LicenseRef-Apache-2.0-AND-BSD-AND-BSD-2-AND-CC-BY-SA-4.0-AND-ISC-AND-MIT", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:app-containers\\/skopeo:app-containers\\/skopeo:1.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:app-containers\\/skopeo:app_containers\\/skopeo:1.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:app_containers\\/skopeo:app-containers\\/skopeo:1.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:app_containers\\/skopeo:app_containers\\/skopeo:1.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:app:app-containers\\/skopeo:1.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:app:app_containers\\/skopeo:1.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:ebuild/app-containers%2Fskopeo@1.5.1"}]}, {"name": "apt", "SPDXID": "SPDXRef-Package-deb-apt-3ba8292752e73177", "versionInfo": "1.8.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from DPKG DB: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/var/lib/dpkg/status", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apt:apt:1.8.2:*:*:*:*:*:*:*"}]}, {"name": "bundler", "SPDXID": "SPDXRef-Package-gem-bundler-06fbad6866ac85ac", "versionInfo": "2.1.4", "supplier": "Person: Andr\u00e9 Arko", "originator": "Person: Andr\u00e9 Arko", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "homepage": "https://bundler.io", "sourceInfo": "acquired package info from installed gem metadata file: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/ruby/specifications/bundler.gemspec", "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jessica-lynn-suttles:bundler:2.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jessica_lynn_suttles:bundler:2.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:stephanie-morillo:bundler:2.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:stephanie_morillo:bundler:2.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hiroshi-shibata:bundler:2.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hiroshi_shibata:bundler:2.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:colby-swandale:bundler:2.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:colby_swandale:bundler:2.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:samuel-giddins:bundler:2.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:samuel_giddins:bundler:2.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:chris-morris:bundler:2.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:chris_morris:bundler:2.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:carl-lerche:bundler:2.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:carl_lerche:bundler:2.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:terence-lee:bundler:2.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:terence_lee:bundler:2.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yehuda-katz:bundler:2.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yehuda_katz:bundler:2.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grey-baker:bundler:2.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grey_baker:bundler:2.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:james-wen:bundler:2.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:james_wen:bundler:2.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ruby-lang:bundler:2.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ruby_lang:bundler:2.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tim-moore:bundler:2.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tim_moore:bundler:2.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bundler:bundler:2.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ruby:bundler:2.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:gem/bundler@2.1.4"}]}, {"name": "busybox", "SPDXID": "SPDXRef-Package-binary-busybox-991efd3425f4bb08", "versionInfo": "1.31.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from the following paths: /grype-0.119.0/grype/distro/testdata/os/busybox/bin/busybox", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:busybox:busybox:1.31.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/busybox@1.31.1"}]}, {"name": "cel.dev/expr", "SPDXID": "SPDXRef-Package-go-module-cel.dev-expr-50296d5ce895996f", "versionInfo": "v0.25.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cel.dev/expr@v0.25.2"}]}, {"name": "cel.dev/expr", "SPDXID": "SPDXRef-Package-go-module-cel.dev-expr-20509c9d2dbe5cf0", "versionInfo": "v0.25.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cel.dev/expr@v0.25.2"}]}, {"name": "cloud.google.com/go", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-419b179104eb109e", "versionInfo": "v0.123.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go@v0.123.0"}]}, {"name": "cloud.google.com/go", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-a10c4025d310d547", "versionInfo": "v0.123.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go@v0.123.0"}]}, {"name": "cloud.google.com/go/auth", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-auth-84f227628c1b2ced", "versionInfo": "v0.23.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:auth:v0.23.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/auth@v0.23.2"}]}, {"name": "cloud.google.com/go/auth", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-auth-c82cca5370c47267", "versionInfo": "v0.23.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:auth:v0.23.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/auth@v0.23.2"}]}, {"name": "cloud.google.com/go/auth/oauth2adapt", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-db9b423947e22092", "versionInfo": "v0.2.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:auth\\/oauth2adapt:v0.2.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/auth@v0.2.8#oauth2adapt"}]}, {"name": "cloud.google.com/go/auth/oauth2adapt", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-4c6e94db00098859", "versionInfo": "v0.2.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:auth\\/oauth2adapt:v0.2.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/auth@v0.2.8#oauth2adapt"}]}, {"name": "cloud.google.com/go/compute/metadata", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-c14bc92e6fc464c8", "versionInfo": "v0.9.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:compute\\/metadata:v0.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/compute@v0.9.0#metadata"}]}, {"name": "cloud.google.com/go/compute/metadata", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-3840e907ad45a616", "versionInfo": "v0.9.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:compute\\/metadata:v0.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/compute@v0.9.0#metadata"}]}, {"name": "cloud.google.com/go/iam", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-iam-6b4ac685814b02f9", "versionInfo": "v1.12.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:iam:v1.12.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/iam@v1.12.0"}]}, {"name": "cloud.google.com/go/iam", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-iam-48ab872a9f3d2f71", "versionInfo": "v1.12.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:iam:v1.12.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/iam@v1.12.0"}]}, {"name": "cloud.google.com/go/monitoring", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-monitoring-170165bad3bf32a9", "versionInfo": "v1.30.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:monitoring:v1.30.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/monitoring@v1.30.0"}]}, {"name": "cloud.google.com/go/monitoring", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-monitoring-75a7cca604679775", "versionInfo": "v1.30.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:monitoring:v1.30.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/monitoring@v1.30.0"}]}, {"name": "cloud.google.com/go/storage", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-storage-90cdefcb212ade70", "versionInfo": "v1.65.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:storage:v1.65.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/storage@v1.65.1"}]}, {"name": "cloud.google.com/go/storage", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-storage-e36f92b0906149ab", "versionInfo": "v1.65.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:storage:v1.65.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/storage@v1.65.1"}]}, {"name": "codespell", "SPDXID": "SPDXRef-Package-python-codespell-1ffc391c48fb0ae8", "versionInfo": "2.4.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from installed python package manifest file: /vendor/go.opentelemetry.io/otel/requirements.txt", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python-codespell:python-codespell:2.4.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python-codespell:python_codespell:2.4.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python_codespell:python-codespell:2.4.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python_codespell:python_codespell:2.4.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:codespell:python-codespell:2.4.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:codespell:python_codespell:2.4.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python-codespell:codespell:2.4.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python_codespell:codespell:2.4.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python:python-codespell:2.4.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python:python_codespell:2.4.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:codespell:codespell:2.4.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python:codespell:2.4.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:pypi/codespell@2.4.2"}]}, {"name": "colourista", "SPDXID": "SPDXRef-Package-hackage-colourista-f735d454279cf07f", "versionInfo": "0.1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from cabal or stack manifest files: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/haskell/stack.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:colourista:colourista:0.1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:hackage/colourista@0.1.0.1"}]}, {"name": "configurator-pg", "SPDXID": "SPDXRef-Package-hackage-configurator-pg-ce7715bafa9829fa", "versionInfo": "0.2.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from cabal or stack manifest files: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/haskell/stack.yaml.lock", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:configurator-pg:configurator-pg:0.2.6:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:configurator-pg:configurator_pg:0.2.6:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:configurator_pg:configurator-pg:0.2.6:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:configurator_pg:configurator_pg:0.2.6:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:configurator:configurator-pg:0.2.6:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:configurator:configurator_pg:0.2.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:hackage/configurator-pg@0.2.6"}]}, {"name": "dario.cat/mergo", "SPDXID": "SPDXRef-Package-go-module-dario.cat-mergo-8a417a55484d15ee", "versionInfo": "v1.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/dario.cat/mergo@v1.0.2"}]}, {"name": "dario.cat/mergo", "SPDXID": "SPDXRef-Package-go-module-dario.cat-mergo-f8c5fb54d02b3093", "versionInfo": "v1.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/dario.cat/mergo@v1.0.2"}]}, {"name": "dataclass-wizard", "SPDXID": "SPDXRef-Package-python-dataclass-wizard-52f7dbbe307282d0", "versionInfo": "0.36.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from installed python package manifest file: /grype-0.119.0/test/quality/requirements.txt", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python-dataclass-wizard:python-dataclass-wizard:0.36.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python-dataclass-wizard:python_dataclass_wizard:0.36.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python_dataclass_wizard:python-dataclass-wizard:0.36.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python_dataclass_wizard:python_dataclass_wizard:0.36.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dataclass-wizard:python-dataclass-wizard:0.36.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dataclass-wizard:python_dataclass_wizard:0.36.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dataclass_wizard:python-dataclass-wizard:0.36.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dataclass_wizard:python_dataclass_wizard:0.36.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python-dataclass-wizard:dataclass-wizard:0.36.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python-dataclass-wizard:dataclass_wizard:0.36.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python-dataclass:python-dataclass-wizard:0.36.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python-dataclass:python_dataclass_wizard:0.36.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python_dataclass:python-dataclass-wizard:0.36.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python_dataclass:python_dataclass_wizard:0.36.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python_dataclass_wizard:dataclass-wizard:0.36.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python_dataclass_wizard:dataclass_wizard:0.36.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dataclass-wizard:dataclass-wizard:0.36.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dataclass-wizard:dataclass_wizard:0.36.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dataclass:python-dataclass-wizard:0.36.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dataclass:python_dataclass_wizard:0.36.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dataclass_wizard:dataclass-wizard:0.36.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dataclass_wizard:dataclass_wizard:0.36.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python-dataclass:dataclass-wizard:0.36.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python-dataclass:dataclass_wizard:0.36.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python_dataclass:dataclass-wizard:0.36.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python_dataclass:dataclass_wizard:0.36.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python:python-dataclass-wizard:0.36.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python:python_dataclass_wizard:0.36.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dataclass:dataclass-wizard:0.36.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dataclass:dataclass_wizard:0.36.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python:dataclass-wizard:0.36.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python:dataclass_wizard:0.36.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:pypi/dataclass-wizard@0.36.2"}]}, {"name": "dive", "SPDXID": "SPDXRef-Package-rpm-dive-5c1f992459445754", "versionInfo": "0.9.2-1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from RPM DB: /grype-0.119.0/test/integration/testdata/image-centos-match-coverage/var/lib/rpm/Packages", "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dive:dive:0.9.2-1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/dive@0.9.2-1?arch=x86_64&upstream=dive-0.9.2-1.src.rpm"}]}, {"name": "dive", "SPDXID": "SPDXRef-Package-rpm-dive-93b614c01c957d36", "versionInfo": "0.9.2-1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from RPM DB: /grype-0.119.0/test/integration/testdata/image-sles-match-coverage/var/lib/rpm/Packages", "licenseConcluded": "NOASSERTION", "licenseDeclared": "MIT", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dive:dive:0.9.2-1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/dive@0.9.2-1?arch=x86_64&upstream=dive-0.9.2-1.src.rpm"}]}, {"name": "docker/login-action", "SPDXID": "SPDXRef-Package-github-action-docker-login-action-1c412d41e9b3d112", "versionInfo": "v4.6.0", "supplier": "Organization: docker", "originator": "Organization: docker", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /grype-0.119.0/.github/workflows/release.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/login-action:docker\\/login-action:v4.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/login-action:docker\\/login_action:v4.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/login_action:docker\\/login-action:v4.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/login_action:docker\\/login_action:v4.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/login:docker\\/login-action:v4.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/login:docker\\/login_action:v4.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/docker/login-action@v4.6.0"}]}, {"name": "example-java-app-maven", "SPDXID": "SPDXRef-Package-java-archive-example-java-app-maven-a7a11a8dd6012208", "versionInfo": "0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA1", "checksumValue": "100b566a7dcdb187bf9f14ecd96427cadd535bfe"}], "sourceInfo": "acquired package info from installed java archive: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/java/example-java-app-maven-0.1.0.jar", "licenseConcluded": "Apache-2.0", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:example-java-app-maven:example-java-app-maven:0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:example-java-app-maven:example_java_app_maven:0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:example_java_app_maven:example-java-app-maven:0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:example_java_app_maven:example_java_app_maven:0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:example-java-app:example-java-app-maven:0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:example-java-app:example_java_app_maven:0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:example_java_app:example-java-app-maven:0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:example_java_app:example_java_app_maven:0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:example-java:example-java-app-maven:0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:example-java:example_java_app_maven:0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:example_java:example-java-app-maven:0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:example_java:example_java_app_maven:0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:org.anchore:example-java-app-maven:0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:org.anchore:example_java_app_maven:0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:example-java-app-maven:0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:example_java_app_maven:0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:example:example-java-app-maven:0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:example:example_java_app_maven:0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/org.anchore/example-java-app-maven@0.1.0"}]}, {"name": "github.com/BurntSushi/toml", "SPDXID": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-6d8d86ef9fe513ea", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:BurntSushi:toml:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/BurntSushi/toml@v1.6.0"}]}, {"name": "github.com/BurntSushi/toml", "SPDXID": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-67f4a4f8963e35c5", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:BurntSushi:toml:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/BurntSushi/toml@v1.6.0"}]}, {"name": "github.com/CycloneDX/cyclonedx-go", "SPDXID": "SPDXRef-Package-go-module-github.com-CycloneDX-cyclonedx-go-5f0109a749bf9b17", "versionInfo": "v0.12.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:CycloneDX:cyclonedx-go:v0.12.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:CycloneDX:cyclonedx_go:v0.12.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/CycloneDX/cyclonedx-go@v0.12.0"}]}, {"name": "github.com/CycloneDX/cyclonedx-go", "SPDXID": "SPDXRef-Package-go-module-github.com-CycloneDX-cyclonedx-go-ef4801668d7f3e86", "versionInfo": "v0.12.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:CycloneDX:cyclonedx-go:v0.12.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:CycloneDX:cyclonedx_go:v0.12.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/CycloneDX/cyclonedx-go@v0.12.0"}]}, {"name": "github.com/DataDog/zstd", "SPDXID": "SPDXRef-Package-go-module-github.com-DataDog-zstd-9062407500acc1db", "versionInfo": "v1.5.7", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:DataDog:zstd:v1.5.7:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/DataDog/zstd@v1.5.7"}]}, {"name": "github.com/DataDog/zstd", "SPDXID": "SPDXRef-Package-go-module-github.com-DataDog-zstd-964cf0e7c346a4e7", "versionInfo": "v1.5.7", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:DataDog:zstd:v1.5.7:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/DataDog/zstd@v1.5.7"}]}, {"name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp", "SPDXID": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-detectors-gcp-0af171990b46e990", "versionInfo": "v1.33.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry-operations-go\\/detectors\\/gcp:v1.33.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry_operations_go\\/detectors\\/gcp:v1.33.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go@v1.33.0#detectors/gcp"}]}, {"name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp", "SPDXID": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-detectors-gcp-7e1fb507b515a82d", "versionInfo": "v1.33.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry-operations-go\\/detectors\\/gcp:v1.33.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry_operations_go\\/detectors\\/gcp:v1.33.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go@v1.33.0#detectors/gcp"}]}, {"name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric", "SPDXID": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-exporter-metric-c2284fdaf11798b9", "versionInfo": "v0.57.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry-operations-go\\/exporter\\/metric:v0.57.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry_operations_go\\/exporter\\/metric:v0.57.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go@v0.57.0#exporter/metric"}]}, {"name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric", "SPDXID": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-exporter-metric-7b6a8b94ad8ca016", "versionInfo": "v0.57.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry-operations-go\\/exporter\\/metric:v0.57.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry_operations_go\\/exporter\\/metric:v0.57.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go@v0.57.0#exporter/metric"}]}, {"name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping", "SPDXID": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-internal-resourcemapping-966cccaf87fde20d", "versionInfo": "v0.57.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry-operations-go\\/internal\\/resourcemapping:v0.57.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry_operations_go\\/internal\\/resourcemapping:v0.57.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go@v0.57.0#internal/resourcemapping"}]}, {"name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping", "SPDXID": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-internal-resourcemapping-af24c13b8f8446ad", "versionInfo": "v0.57.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry-operations-go\\/internal\\/resourcemapping:v0.57.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry_operations_go\\/internal\\/resourcemapping:v0.57.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go@v0.57.0#internal/resourcemapping"}]}, {"name": "github.com/Intevation/gval", "SPDXID": "SPDXRef-Package-go-module-github.com-Intevation-gval-641887a64183bbd6", "versionInfo": "v1.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Intevation:gval:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Intevation/gval@v1.3.0"}]}, {"name": "github.com/Intevation/gval", "SPDXID": "SPDXRef-Package-go-module-github.com-Intevation-gval-5809dfa1bbb1e430", "versionInfo": "v1.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Intevation:gval:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Intevation/gval@v1.3.0"}]}, {"name": "github.com/Intevation/jsonpath", "SPDXID": "SPDXRef-Package-go-module-github.com-Intevation-jsonpath-17b0206d8e174038", "versionInfo": "v0.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Intevation:jsonpath:v0.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Intevation/jsonpath@v0.2.1"}]}, {"name": "github.com/Intevation/jsonpath", "SPDXID": "SPDXRef-Package-go-module-github.com-Intevation-jsonpath-f1e9519d812fb35e", "versionInfo": "v0.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Intevation:jsonpath:v0.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Intevation/jsonpath@v0.2.1"}]}, {"name": "github.com/Masterminds/goutils", "SPDXID": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-4a60e6f3f9cac2b0", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:goutils_project:goutils:v1.1.1:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Masterminds/goutils@v1.1.1"}]}, {"name": "github.com/Masterminds/goutils", "SPDXID": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-91773dfed6d98319", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:goutils_project:goutils:v1.1.1:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Masterminds/goutils@v1.1.1"}]}, {"name": "github.com/Masterminds/semver/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-bb0aa2b6ed288b02", "versionInfo": "v3.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Masterminds:semver\\/v3:v3.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Masterminds/semver@v3.5.0#v3"}]}, {"name": "github.com/Masterminds/semver/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-005f8f7262d859c0", "versionInfo": "v3.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Masterminds:semver\\/v3:v3.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Masterminds/semver@v3.5.0#v3"}]}, {"name": "github.com/Masterminds/sprig/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-17921bc3f2f4444b", "versionInfo": "v3.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Masterminds:sprig\\/v3:v3.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Masterminds/sprig@v3.3.0#v3"}]}, {"name": "github.com/Masterminds/sprig/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-0faef477ce29ac7b", "versionInfo": "v3.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Masterminds:sprig\\/v3:v3.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Masterminds/sprig@v3.3.0#v3"}]}, {"name": "github.com/Microsoft/go-winio", "SPDXID": "SPDXRef-Package-go-module-github.com-Microsoft-go-winio-fc378e330b798bc4", "versionInfo": "v0.6.3-0.20251027160822-ad3df93bed29", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Microsoft:go-winio:v0.6.3-0.20251027160822-ad3df93bed29:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Microsoft:go_winio:v0.6.3-0.20251027160822-ad3df93bed29:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Microsoft/go-winio@v0.6.3-0.20251027160822-ad3df93bed29"}]}, {"name": "github.com/Microsoft/go-winio", "SPDXID": "SPDXRef-Package-go-module-github.com-Microsoft-go-winio-abafb068811b268a", "versionInfo": "v0.6.3-0.20251027160822-ad3df93bed29", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Microsoft:go-winio:v0.6.3-0.20251027160822-ad3df93bed29:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Microsoft:go_winio:v0.6.3-0.20251027160822-ad3df93bed29:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Microsoft/go-winio@v0.6.3-0.20251027160822-ad3df93bed29"}]}, {"name": "github.com/Microsoft/hcsshim", "SPDXID": "SPDXRef-Package-go-module-github.com-Microsoft-hcsshim-edfc966a019b6594", "versionInfo": "v0.15.0-rc.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Microsoft:hcsshim:v0.15.0-rc.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Microsoft/hcsshim@v0.15.0-rc.1"}]}, {"name": "github.com/Microsoft/hcsshim", "SPDXID": "SPDXRef-Package-go-module-github.com-Microsoft-hcsshim-681684c6c568f18c", "versionInfo": "v0.15.0-rc.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Microsoft:hcsshim:v0.15.0-rc.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Microsoft/hcsshim@v0.15.0-rc.1"}]}, {"name": "github.com/OneOfOne/xxhash", "SPDXID": "SPDXRef-Package-go-module-github.com-OneOfOne-xxhash-188589ff7ba0a040", "versionInfo": "v1.2.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:OneOfOne:xxhash:v1.2.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/OneOfOne/xxhash@v1.2.8"}]}, {"name": "github.com/OneOfOne/xxhash", "SPDXID": "SPDXRef-Package-go-module-github.com-OneOfOne-xxhash-82acb88b9086edae", "versionInfo": "v1.2.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:OneOfOne:xxhash:v1.2.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/OneOfOne/xxhash@v1.2.8"}]}, {"name": "github.com/ProtonMail/go-crypto", "SPDXID": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-6d5b046a5726eafa", "versionInfo": "v1.4.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ProtonMail:go-crypto:v1.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ProtonMail:go_crypto:v1.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/ProtonMail/go-crypto@v1.4.1"}]}, {"name": "github.com/ProtonMail/go-crypto", "SPDXID": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-979663e49283059d", "versionInfo": "v1.4.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ProtonMail:go-crypto:v1.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ProtonMail:go_crypto:v1.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/ProtonMail/go-crypto@v1.4.1"}]}, {"name": "github.com/STARRY-S/zip", "SPDXID": "SPDXRef-Package-go-module-github.com-STARRY-S-zip-bdc86415dd293a9e", "versionInfo": "v0.2.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:STARRY-S:zip:v0.2.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:STARRY_S:zip:v0.2.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:STARRY:zip:v0.2.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/STARRY-S/zip@v0.2.3"}]}, {"name": "github.com/STARRY-S/zip", "SPDXID": "SPDXRef-Package-go-module-github.com-STARRY-S-zip-ad044ed4fb9205e9", "versionInfo": "v0.2.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:STARRY-S:zip:v0.2.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:STARRY_S:zip:v0.2.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:STARRY:zip:v0.2.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/STARRY-S/zip@v0.2.3"}]}, {"name": "github.com/acarl005/stripansi", "SPDXID": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-83a5b45aad341756", "versionInfo": "v0.0.0-20180116102854-5a71ef0e047d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:acarl005:stripansi:v0.0.0-20180116102854-5a71ef0e047d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/acarl005/stripansi@v0.0.0-20180116102854-5a71ef0e047d"}]}, {"name": "github.com/acarl005/stripansi", "SPDXID": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-f584eafa678eed90", "versionInfo": "v0.0.0-20180116102854-5a71ef0e047d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:acarl005:stripansi:v0.0.0-20180116102854-5a71ef0e047d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/acarl005/stripansi@v0.0.0-20180116102854-5a71ef0e047d"}]}, {"name": "github.com/acobaugh/osrelease", "SPDXID": "SPDXRef-Package-go-module-github.com-acobaugh-osrelease-9624c84676a6128e", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:acobaugh:osrelease:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/acobaugh/osrelease@v0.1.0"}]}, {"name": "github.com/acobaugh/osrelease", "SPDXID": "SPDXRef-Package-go-module-github.com-acobaugh-osrelease-50ac6b3f804ae772", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:acobaugh:osrelease:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/acobaugh/osrelease@v0.1.0"}]}, {"name": "github.com/adrg/xdg", "SPDXID": "SPDXRef-Package-go-module-github.com-adrg-xdg-d389c0dbfcd56b17", "versionInfo": "v0.5.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:adrg:xdg:v0.5.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/adrg/xdg@v0.5.3"}]}, {"name": "github.com/adrg/xdg", "SPDXID": "SPDXRef-Package-go-module-github.com-adrg-xdg-df2cb66aad00b046", "versionInfo": "v0.5.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:adrg:xdg:v0.5.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/adrg/xdg@v0.5.3"}]}, {"name": "github.com/agext/levenshtein", "SPDXID": "SPDXRef-Package-go-module-github.com-agext-levenshtein-64d88b1cfcc4917a", "versionInfo": "v1.2.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:agext:levenshtein:v1.2.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/agext/levenshtein@v1.2.3"}]}, {"name": "github.com/agext/levenshtein", "SPDXID": "SPDXRef-Package-go-module-github.com-agext-levenshtein-8e30e3ed7b06c3f2", "versionInfo": "v1.2.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:agext:levenshtein:v1.2.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/agext/levenshtein@v1.2.3"}]}, {"name": "github.com/anchore/bubbly", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-bubbly-70cc25030abcb0ab", "versionInfo": "v0.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:bubbly:v0.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/bubbly@v0.2.1"}]}, {"name": "github.com/anchore/bubbly", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-bubbly-7fd82296e1771eb5", "versionInfo": "v0.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:bubbly:v0.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/bubbly@v0.2.1"}]}, {"name": "github.com/anchore/clio", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-clio-0ca4696fdd0313fb", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:clio:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/clio@v0.1.1"}]}, {"name": "github.com/anchore/clio", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-clio-bb46ad15420b0bf0", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:clio:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/clio@v0.1.1"}]}, {"name": "github.com/anchore/fangs", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-fangs-135612021b16f6db", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:fangs:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/fangs@v0.1.1"}]}, {"name": "github.com/anchore/fangs", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-fangs-8e3b2ed4b9aff635", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:fangs:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/fangs@v0.1.1"}]}, {"name": "github.com/anchore/go-collections", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-collections-eabcc479092bdaee", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-collections:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_collections:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-collections@v0.1.1"}]}, {"name": "github.com/anchore/go-collections", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-collections-795357fa4abf712f", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-collections:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_collections:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-collections@v0.1.1"}]}, {"name": "github.com/anchore/go-homedir", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-homedir-859f99cb1a2f8747", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-homedir:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_homedir:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-homedir@v0.1.1"}]}, {"name": "github.com/anchore/go-homedir", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-homedir-ed0f6ed97e979cbb", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-homedir:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_homedir:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-homedir@v0.1.1"}]}, {"name": "github.com/anchore/go-logger", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-logger-5534b09cb8c7a0a6", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-logger:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_logger:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-logger@v0.1.1"}]}, {"name": "github.com/anchore/go-logger", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-logger-c436ee9ed3fa26ff", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-logger:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_logger:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-logger@v0.1.1"}]}, {"name": "github.com/anchore/go-lzo", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-lzo-20f68955a698b8ba", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-lzo:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_lzo:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-lzo@v0.1.1"}]}, {"name": "github.com/anchore/go-lzo", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-lzo-8b2e33fea520a2b3", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-lzo:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_lzo:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-lzo@v0.1.1"}]}, {"name": "github.com/anchore/go-macholibre", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-macholibre-6353d78fb09b946a", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-macholibre:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_macholibre:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-macholibre@v0.1.1"}]}, {"name": "github.com/anchore/go-macholibre", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-macholibre-2574360ef88fad6d", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-macholibre:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_macholibre:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-macholibre@v0.1.1"}]}, {"name": "github.com/anchore/go-make", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-make-38f7c1ef68e05752", "versionInfo": "v0.8.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/.make/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-make:v0.8.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_make:v0.8.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-make@v0.8.0"}]}, {"name": "github.com/anchore/go-rpmdb", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-rpmdb-5638b9d10ee77a25", "versionInfo": "v0.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-rpmdb:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_rpmdb:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-rpmdb@v0.2.0"}]}, {"name": "github.com/anchore/go-rpmdb", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-rpmdb-6521ac4d2848b411", "versionInfo": "v0.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-rpmdb:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_rpmdb:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-rpmdb@v0.2.0"}]}, {"name": "github.com/anchore/go-struct-converter", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-struct-converter-a4fa0821b2842a4b", "versionInfo": "v0.2.0-rc2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-struct-converter:v0.2.0-rc2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_struct_converter:v0.2.0-rc2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-struct-converter@v0.2.0-rc2"}]}, {"name": "github.com/anchore/go-struct-converter", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-struct-converter-7c48e4f28be82025", "versionInfo": "v0.2.0-rc2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-struct-converter:v0.2.0-rc2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_struct_converter:v0.2.0-rc2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-struct-converter@v0.2.0-rc2"}]}, {"name": "github.com/anchore/go-sync", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-sync-4875839892d70300", "versionInfo": "v0.1.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-sync:v0.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_sync:v0.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-sync@v0.1.2"}]}, {"name": "github.com/anchore/go-sync", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-sync-27bb9c28e5b6aa36", "versionInfo": "v0.1.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-sync:v0.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_sync:v0.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-sync@v0.1.2"}]}, {"name": "github.com/anchore/go-version", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-version-3f627e94736035cd", "versionInfo": "v1.2.2-0.20210903204242-51efa5b487c4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-version:v1.2.2-0.20210903204242-51efa5b487c4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_version:v1.2.2-0.20210903204242-51efa5b487c4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-version@v1.2.2-0.20210903204242-51efa5b487c4"}]}, {"name": "github.com/anchore/go-version", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-version-7ed7570dd0bf861d", "versionInfo": "v1.2.2-0.20210903204242-51efa5b487c4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-version:v1.2.2-0.20210903204242-51efa5b487c4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_version:v1.2.2-0.20210903204242-51efa5b487c4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-version@v1.2.2-0.20210903204242-51efa5b487c4"}]}, {"name": "github.com/anchore/packageurl-go", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-packageurl-go-376fa79c3055fefd", "versionInfo": "v0.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:packageurl-go:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:packageurl_go:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/packageurl-go@v0.2.0"}]}, {"name": "github.com/anchore/packageurl-go", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-packageurl-go-f1a0779f04ec5b66", "versionInfo": "v0.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:packageurl-go:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:packageurl_go:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/packageurl-go@v0.2.0"}]}, {"name": "github.com/anchore/stereoscope", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-stereoscope-786469d1760bb790", "versionInfo": "v0.3.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:stereoscope:v0.3.2:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/stereoscope@v0.3.2"}]}, {"name": "github.com/anchore/stereoscope", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-stereoscope-792a182a6cbaa920", "versionInfo": "v0.3.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:stereoscope:v0.3.2:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/stereoscope@v0.3.2"}]}, {"name": "github.com/anchore/syft", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-syft-c7350b5cdf82ecc4", "versionInfo": "v1.52.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:syft:v1.52.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/syft@v1.52.0"}]}, {"name": "github.com/anchore/syft", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-syft-519eb55e8227c328", "versionInfo": "v1.52.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:syft:v1.52.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/syft@v1.52.0"}]}, {"name": "github.com/andybalholm/brotli", "SPDXID": "SPDXRef-Package-go-module-github.com-andybalholm-brotli-244bcfc9c9eb6201", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:andybalholm:brotli:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/andybalholm/brotli@v1.2.0"}]}, {"name": "github.com/andybalholm/brotli", "SPDXID": "SPDXRef-Package-go-module-github.com-andybalholm-brotli-995fb94043b5e40b", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:andybalholm:brotli:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/andybalholm/brotli@v1.2.0"}]}, {"name": "github.com/apparentlymart/go-textseg/v15", "SPDXID": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-e406d1260ec16639", "versionInfo": "v15.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apparentlymart:go-textseg\\/v15:v15.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apparentlymart:go_textseg\\/v15:v15.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/apparentlymart/go-textseg@v15.0.0#v15"}]}, {"name": "github.com/apparentlymart/go-textseg/v15", "SPDXID": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-489ab249cc2e5be9", "versionInfo": "v15.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apparentlymart:go-textseg\\/v15:v15.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apparentlymart:go_textseg\\/v15:v15.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/apparentlymart/go-textseg@v15.0.0#v15"}]}, {"name": "github.com/aquasecurity/go-pep440-version", "SPDXID": "SPDXRef-Package-go-module-github.com-aquasecurity-go-pep440-version-f4faf7d97dbd3604", "versionInfo": "v0.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity:go-pep440-version:v0.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity:go_pep440_version:v0.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aquasecurity/go-pep440-version@v0.0.1"}]}, {"name": "github.com/aquasecurity/go-pep440-version", "SPDXID": "SPDXRef-Package-go-module-github.com-aquasecurity-go-pep440-version-d22de760b0b61502", "versionInfo": "v0.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity:go-pep440-version:v0.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity:go_pep440_version:v0.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aquasecurity/go-pep440-version@v0.0.1"}]}, {"name": "github.com/aquasecurity/go-version", "SPDXID": "SPDXRef-Package-go-module-github.com-aquasecurity-go-version-5e2106a6cbb36dcd", "versionInfo": "v0.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity:go-version:v0.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity:go_version:v0.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aquasecurity/go-version@v0.0.1"}]}, {"name": "github.com/aquasecurity/go-version", "SPDXID": "SPDXRef-Package-go-module-github.com-aquasecurity-go-version-aa7d699d45c2530e", "versionInfo": "v0.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity:go-version:v0.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity:go_version:v0.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aquasecurity/go-version@v0.0.1"}]}, {"name": "github.com/araddon/dateparse", "SPDXID": "SPDXRef-Package-go-module-github.com-araddon-dateparse-e6631978d47b7403", "versionInfo": "v0.0.0-20210429162001-6b43995a97de", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:araddon:dateparse:v0.0.0-20210429162001-6b43995a97de:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/araddon/dateparse@v0.0.0-20210429162001-6b43995a97de"}]}, {"name": "github.com/araddon/dateparse", "SPDXID": "SPDXRef-Package-go-module-github.com-araddon-dateparse-b339469668eed6d2", "versionInfo": "v0.0.0-20210429162001-6b43995a97de", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:araddon:dateparse:v0.0.0-20210429162001-6b43995a97de:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/araddon/dateparse@v0.0.0-20210429162001-6b43995a97de"}]}, {"name": "github.com/aws/aws-sdk-go-v2", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-efcb5a205c6a76a0", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.44.0"}]}, {"name": "github.com/aws/aws-sdk-go-v2", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-ca00a006fca1e729", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.44.0"}]}, {"name": "github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-aws-protocol-eventstream-1d31bbfdcf4c518d", "versionInfo": "v1.7.20", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/aws\\/protocol\\/eventstream:v1.7.20:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/aws\\/protocol\\/eventstream:v1.7.20:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.7.20#aws/protocol/eventstream"}]}, {"name": "github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-aws-protocol-eventstream-a2b5c5f52a166637", "versionInfo": "v1.7.20", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/aws\\/protocol\\/eventstream:v1.7.20:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/aws\\/protocol\\/eventstream:v1.7.20:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.7.20#aws/protocol/eventstream"}]}, {"name": "github.com/aws/aws-sdk-go-v2/config", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-config-37158a30ef86835b", "versionInfo": "v1.32.40", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/config:v1.32.40:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/config:v1.32.40:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.32.40#config"}]}, {"name": "github.com/aws/aws-sdk-go-v2/config", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-config-4e066468f0e8e9cb", "versionInfo": "v1.32.40", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/config:v1.32.40:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/config:v1.32.40:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.32.40#config"}]}, {"name": "github.com/aws/aws-sdk-go-v2/credentials", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-credentials-564f4f75a2fd353c", "versionInfo": "v1.19.39", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/credentials:v1.19.39:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/credentials:v1.19.39:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.19.39#credentials"}]}, {"name": "github.com/aws/aws-sdk-go-v2/credentials", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-credentials-c857529e5f4cd746", "versionInfo": "v1.19.39", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/credentials:v1.19.39:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/credentials:v1.19.39:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.19.39#credentials"}]}, {"name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-feature-ec2-imds-3a0151868a8d31fe", "versionInfo": "v1.18.40", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/feature\\/ec2\\/imds:v1.18.40:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/feature\\/ec2\\/imds:v1.18.40:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.18.40#feature/ec2/imds"}]}, {"name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-feature-ec2-imds-153a8c245aa59267", "versionInfo": "v1.18.40", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/feature\\/ec2\\/imds:v1.18.40:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/feature\\/ec2\\/imds:v1.18.40:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.18.40#feature/ec2/imds"}]}, {"name": "github.com/aws/aws-sdk-go-v2/internal/configsources", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-configsources-e151d82ec9cffc23", "versionInfo": "v1.4.40", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/configsources:v1.4.40:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/configsources:v1.4.40:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.4.40#internal/configsources"}]}, {"name": "github.com/aws/aws-sdk-go-v2/internal/configsources", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-configsources-28b18aa59cb5efe0", "versionInfo": "v1.4.40", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/configsources:v1.4.40:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/configsources:v1.4.40:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.4.40#internal/configsources"}]}, {"name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-endpoints-v2-2a89bbfede5b08b7", "versionInfo": "v2.7.40", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/endpoints\\/v2:v2.7.40:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/endpoints\\/v2:v2.7.40:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v2.7.40#internal/endpoints/v2"}]}, {"name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-endpoints-v2-40da9e309dd93c31", "versionInfo": "v2.7.40", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/endpoints\\/v2:v2.7.40:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/endpoints\\/v2:v2.7.40:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v2.7.40#internal/endpoints/v2"}]}, {"name": "github.com/aws/aws-sdk-go-v2/internal/v4a", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-v4a-9afd6e90078d3966", "versionInfo": "v1.4.41", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/v4a:v1.4.41:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/v4a:v1.4.41:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.4.41#internal/v4a"}]}, {"name": "github.com/aws/aws-sdk-go-v2/internal/v4a", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-v4a-3ad8a28e5cba1573", "versionInfo": "v1.4.41", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/v4a:v1.4.41:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/v4a:v1.4.41:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.4.41#internal/v4a"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-accept-encoding-5c3ac09cf4317999", "versionInfo": "v1.13.19", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/accept-encoding:v1.13.19:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/accept_encoding:v1.13.19:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.13.19#service/internal/accept-encoding"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-accept-encoding-b36fab65d70c529f", "versionInfo": "v1.13.19", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/accept-encoding:v1.13.19:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/accept_encoding:v1.13.19:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.13.19#service/internal/accept-encoding"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/internal/checksum", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-checksum-631dc73cc1715f47", "versionInfo": "v1.10.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/checksum:v1.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/checksum:v1.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.10.0#service/internal/checksum"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/internal/checksum", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-checksum-321e893ca7a203e7", "versionInfo": "v1.10.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/checksum:v1.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/checksum:v1.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.10.0#service/internal/checksum"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-presigned-url-dd8d34dc728d3d31", "versionInfo": "v1.13.40", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/presigned-url:v1.13.40:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/presigned_url:v1.13.40:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.13.40#service/internal/presigned-url"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-presigned-url-61f8c0ab0d447a58", "versionInfo": "v1.13.40", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/presigned-url:v1.13.40:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/presigned_url:v1.13.40:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.13.40#service/internal/presigned-url"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/internal/s3shared", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-s3shared-0d56695f376e4179", "versionInfo": "v1.19.41", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/s3shared:v1.19.41:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/s3shared:v1.19.41:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.19.41#service/internal/s3shared"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/internal/s3shared", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-s3shared-fac5e71475c122a7", "versionInfo": "v1.19.41", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/s3shared:v1.19.41:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/s3shared:v1.19.41:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.19.41#service/internal/s3shared"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/s3", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-s3-235824f55444fe72", "versionInfo": "v1.108.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/s3:v1.108.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/s3:v1.108.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.108.0#service/s3"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/s3", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-s3-d67703f2e3967565", "versionInfo": "v1.108.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/s3:v1.108.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/s3:v1.108.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.108.0#service/s3"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/signin", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-signin-6e67e04f079df2cb", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/signin:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/signin:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.6.0#service/signin"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/signin", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-signin-c886881dd51cdcf6", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/signin:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/signin:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.6.0#service/signin"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/sso", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sso-56b81e8ec393907a", "versionInfo": "v1.34.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/sso:v1.34.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/sso:v1.34.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.34.0#service/sso"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/sso", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sso-0f97466c0888a006", "versionInfo": "v1.34.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/sso:v1.34.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/sso:v1.34.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.34.0#service/sso"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/ssooidc", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-ssooidc-b51e2248695a983d", "versionInfo": "v1.39.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/ssooidc:v1.39.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/ssooidc:v1.39.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.39.0#service/ssooidc"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/ssooidc", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-ssooidc-c43aa8f0a029e25e", "versionInfo": "v1.39.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/ssooidc:v1.39.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/ssooidc:v1.39.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.39.0#service/ssooidc"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/sts", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sts-ce82306954a0fe9e", "versionInfo": "v1.46.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/sts:v1.46.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/sts:v1.46.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.46.0#service/sts"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/sts", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sts-d6ee70a441172c0c", "versionInfo": "v1.46.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/sts:v1.46.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/sts:v1.46.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.46.0#service/sts"}]}, {"name": "github.com/aws/smithy-go", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-smithy-go-16becfb2765ec82a", "versionInfo": "v1.28.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:smithy-go:v1.28.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:smithy_go:v1.28.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/smithy-go@v1.28.1"}]}, {"name": "github.com/aws/smithy-go", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-smithy-go-8af76b4b194ffa7f", "versionInfo": "v1.28.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:smithy-go:v1.28.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:smithy_go:v1.28.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/smithy-go@v1.28.1"}]}, {"name": "github.com/aymanbagabas/go-osc52/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-aymanbagabas-go-osc52-v2-3d7292ae0be0db1e", "versionInfo": "v2.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aymanbagabas:go-osc52\\/v2:v2.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aymanbagabas:go_osc52\\/v2:v2.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aymanbagabas/go-osc52@v2.0.1#v2"}]}, {"name": "github.com/aymanbagabas/go-osc52/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-aymanbagabas-go-osc52-v2-03b6e9ac04130b97", "versionInfo": "v2.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aymanbagabas:go-osc52\\/v2:v2.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aymanbagabas:go_osc52\\/v2:v2.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aymanbagabas/go-osc52@v2.0.1#v2"}]}, {"name": "github.com/bahlo/generic-list-go", "SPDXID": "SPDXRef-Package-go-module-github.com-bahlo-generic-list-go-cf8afb4116b83830", "versionInfo": "v0.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bahlo:generic-list-go:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bahlo:generic_list_go:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bahlo/generic-list-go@v0.2.0"}]}, {"name": "github.com/bahlo/generic-list-go", "SPDXID": "SPDXRef-Package-go-module-github.com-bahlo-generic-list-go-acb5254b1bc7a3f2", "versionInfo": "v0.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bahlo:generic-list-go:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bahlo:generic_list_go:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bahlo/generic-list-go@v0.2.0"}]}, {"name": "github.com/becheran/wildmatch-go", "SPDXID": "SPDXRef-Package-go-module-github.com-becheran-wildmatch-go-c3e582c1d8b61130", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:becheran:wildmatch-go:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:becheran:wildmatch_go:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/becheran/wildmatch-go@v1.0.0"}]}, {"name": "github.com/becheran/wildmatch-go", "SPDXID": "SPDXRef-Package-go-module-github.com-becheran-wildmatch-go-2bb58d89fe5dbfbc", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:becheran:wildmatch-go:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:becheran:wildmatch_go:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/becheran/wildmatch-go@v1.0.0"}]}, {"name": "github.com/bgentry/go-netrc", "SPDXID": "SPDXRef-Package-go-module-github.com-bgentry-go-netrc-3f2fc36fc7257f16", "versionInfo": "v0.0.0-20140422174119-9fd32a8b3d3d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bgentry:go-netrc:v0.0.0-20140422174119-9fd32a8b3d3d:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bgentry:go_netrc:v0.0.0-20140422174119-9fd32a8b3d3d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bgentry/go-netrc@v0.0.0-20140422174119-9fd32a8b3d3d"}]}, {"name": "github.com/bgentry/go-netrc", "SPDXID": "SPDXRef-Package-go-module-github.com-bgentry-go-netrc-21828244d7792b9a", "versionInfo": "v0.0.0-20140422174119-9fd32a8b3d3d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bgentry:go-netrc:v0.0.0-20140422174119-9fd32a8b3d3d:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bgentry:go_netrc:v0.0.0-20140422174119-9fd32a8b3d3d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bgentry/go-netrc@v0.0.0-20140422174119-9fd32a8b3d3d"}]}, {"name": "github.com/bitnami/go-version", "SPDXID": "SPDXRef-Package-go-module-github.com-bitnami-go-version-c59c7a823bb0703f", "versionInfo": "v0.0.0-20250505154626-452e8c5ee607", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bitnami:go-version:v0.0.0-20250505154626-452e8c5ee607:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bitnami:go_version:v0.0.0-20250505154626-452e8c5ee607:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bitnami/go-version@v0.0.0-20250505154626-452e8c5ee607"}]}, {"name": "github.com/bitnami/go-version", "SPDXID": "SPDXRef-Package-go-module-github.com-bitnami-go-version-528e02e8461a15c8", "versionInfo": "v0.0.0-20250505154626-452e8c5ee607", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bitnami:go-version:v0.0.0-20250505154626-452e8c5ee607:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bitnami:go_version:v0.0.0-20250505154626-452e8c5ee607:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bitnami/go-version@v0.0.0-20250505154626-452e8c5ee607"}]}, {"name": "github.com/blakesmith/ar", "SPDXID": "SPDXRef-Package-go-module-github.com-blakesmith-ar-7f9cdbbae395f22f", "versionInfo": "v0.0.0-20190502131153-809d4375e1fb", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:blakesmith:ar:v0.0.0-20190502131153-809d4375e1fb:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/blakesmith/ar@v0.0.0-20190502131153-809d4375e1fb"}]}, {"name": "github.com/blakesmith/ar", "SPDXID": "SPDXRef-Package-go-module-github.com-blakesmith-ar-ff09d561baf8e717", "versionInfo": "v0.0.0-20190502131153-809d4375e1fb", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:blakesmith:ar:v0.0.0-20190502131153-809d4375e1fb:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/blakesmith/ar@v0.0.0-20190502131153-809d4375e1fb"}]}, {"name": "github.com/bmatcuk/doublestar/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v2-0b15ec05af4a2804", "versionInfo": "v2.0.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bmatcuk:doublestar\\/v2:v2.0.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bmatcuk/doublestar@v2.0.4#v2"}]}, {"name": "github.com/bmatcuk/doublestar/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v2-b59b1d1e79d7ea11", "versionInfo": "v2.0.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bmatcuk:doublestar\\/v2:v2.0.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bmatcuk/doublestar@v2.0.4#v2"}]}, {"name": "github.com/bmatcuk/doublestar/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v4-70cd0b1898788493", "versionInfo": "v4.10.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bmatcuk:doublestar\\/v4:v4.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bmatcuk/doublestar@v4.10.0#v4"}]}, {"name": "github.com/bmatcuk/doublestar/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v4-94526eb1baaee54e", "versionInfo": "v4.10.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/.make/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bmatcuk:doublestar\\/v4:v4.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bmatcuk/doublestar@v4.10.0#v4"}]}, {"name": "github.com/bmatcuk/doublestar/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v4-29e481ed8fc11a79", "versionInfo": "v4.10.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bmatcuk:doublestar\\/v4:v4.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bmatcuk/doublestar@v4.10.0#v4"}]}, {"name": "github.com/bodgit/plumbing", "SPDXID": "SPDXRef-Package-go-module-github.com-bodgit-plumbing-6d6f0fe22579da8e", "versionInfo": "v1.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bodgit:plumbing:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bodgit/plumbing@v1.3.0"}]}, {"name": "github.com/bodgit/plumbing", "SPDXID": "SPDXRef-Package-go-module-github.com-bodgit-plumbing-fd079dd44ff9aef7", "versionInfo": "v1.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bodgit:plumbing:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bodgit/plumbing@v1.3.0"}]}, {"name": "github.com/bodgit/sevenzip", "SPDXID": "SPDXRef-Package-go-module-github.com-bodgit-sevenzip-82fa7f489be20976", "versionInfo": "v1.6.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bodgit:sevenzip:v1.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bodgit/sevenzip@v1.6.1"}]}, {"name": "github.com/bodgit/sevenzip", "SPDXID": "SPDXRef-Package-go-module-github.com-bodgit-sevenzip-a0079555443c94fe", "versionInfo": "v1.6.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bodgit:sevenzip:v1.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bodgit/sevenzip@v1.6.1"}]}, {"name": "github.com/bodgit/windows", "SPDXID": "SPDXRef-Package-go-module-github.com-bodgit-windows-1be77fc9d30ca125", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bodgit:windows:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bodgit/windows@v1.0.1"}]}, {"name": "github.com/bodgit/windows", "SPDXID": "SPDXRef-Package-go-module-github.com-bodgit-windows-7a39a002e41fba22", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bodgit:windows:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bodgit/windows@v1.0.1"}]}, {"name": "github.com/buger/jsonparser", "SPDXID": "SPDXRef-Package-go-module-github.com-buger-jsonparser-4b987807401373b5", "versionInfo": "v1.1.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:buger:jsonparser:v1.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/buger/jsonparser@v1.1.2"}]}, {"name": "github.com/buger/jsonparser", "SPDXID": "SPDXRef-Package-go-module-github.com-buger-jsonparser-7d72add1f6e297c5", "versionInfo": "v1.1.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:buger:jsonparser:v1.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/buger/jsonparser@v1.1.2"}]}, {"name": "github.com/cespare/xxhash/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-44163de5007e6449", "versionInfo": "v2.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cespare/xxhash@v2.3.0#v2"}]}, {"name": "github.com/cespare/xxhash/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-172719dd1e40f17f", "versionInfo": "v2.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cespare/xxhash@v2.3.0#v2"}]}, {"name": "github.com/charmbracelet/bubbles", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbles-97cfbf7b3355753f", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:bubbles:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/bubbles@v1.0.0"}]}, {"name": "github.com/charmbracelet/bubbles", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbles-ee3bc9ebc3de1df1", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:bubbles:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/bubbles@v1.0.0"}]}, {"name": "github.com/charmbracelet/bubbletea", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbletea-0877d4ed51165bc6", "versionInfo": "v1.3.10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:bubbletea:v1.3.10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/bubbletea@v1.3.10"}]}, {"name": "github.com/charmbracelet/bubbletea", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbletea-4f4c9ead917998d6", "versionInfo": "v1.3.10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:bubbletea:v1.3.10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/bubbletea@v1.3.10"}]}, {"name": "github.com/charmbracelet/colorprofile", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-colorprofile-336b7ead245bcb11", "versionInfo": "v0.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:colorprofile:v0.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/colorprofile@v0.4.3"}]}, {"name": "github.com/charmbracelet/colorprofile", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-colorprofile-c5918b9259778ca9", "versionInfo": "v0.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:colorprofile:v0.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/colorprofile@v0.4.3"}]}, {"name": "github.com/charmbracelet/harmonica", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-harmonica-ef5d79e29712fc23", "versionInfo": "v0.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:harmonica:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/harmonica@v0.2.0"}]}, {"name": "github.com/charmbracelet/harmonica", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-harmonica-6231599fb0a27c1d", "versionInfo": "v0.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:harmonica:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/harmonica@v0.2.0"}]}, {"name": "github.com/charmbracelet/lipgloss", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-lipgloss-5717a8e54439ceaf", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:lipgloss:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/lipgloss@v1.1.0"}]}, {"name": "github.com/charmbracelet/lipgloss", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-lipgloss-ab168d64bd3af37b", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:lipgloss:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/lipgloss@v1.1.0"}]}, {"name": "github.com/charmbracelet/x/ansi", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-x-ansi-d16466e5c11c9c7c", "versionInfo": "v0.11.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:x\\/ansi:v0.11.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/x@v0.11.6#ansi"}]}, {"name": "github.com/charmbracelet/x/ansi", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-x-ansi-6552ffc18e8afe1f", "versionInfo": "v0.11.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:x\\/ansi:v0.11.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/x@v0.11.6#ansi"}]}, {"name": "github.com/charmbracelet/x/cellbuf", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-x-cellbuf-da86d400c320b7cd", "versionInfo": "v0.0.15", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:x\\/cellbuf:v0.0.15:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/x@v0.0.15#cellbuf"}]}, {"name": "github.com/charmbracelet/x/cellbuf", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-x-cellbuf-12cf473406dae1e9", "versionInfo": "v0.0.15", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:x\\/cellbuf:v0.0.15:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/x@v0.0.15#cellbuf"}]}, {"name": "github.com/charmbracelet/x/term", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-x-term-e16502c875bce6ab", "versionInfo": "v0.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:x\\/term:v0.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/x@v0.2.2#term"}]}, {"name": "github.com/charmbracelet/x/term", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-x-term-8680b2b8c12b14e2", "versionInfo": "v0.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:x\\/term:v0.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/x@v0.2.2#term"}]}, {"name": "github.com/clipperhouse/displaywidth", "SPDXID": "SPDXRef-Package-go-module-github.com-clipperhouse-displaywidth-5c8b2642db8ea713", "versionInfo": "v0.11.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:clipperhouse:displaywidth:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/clipperhouse/displaywidth@v0.11.0"}]}, {"name": "github.com/clipperhouse/displaywidth", "SPDXID": "SPDXRef-Package-go-module-github.com-clipperhouse-displaywidth-5f184d5c9f496346", "versionInfo": "v0.11.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:clipperhouse:displaywidth:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/clipperhouse/displaywidth@v0.11.0"}]}, {"name": "github.com/clipperhouse/uax29/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-dfa0b50ab9a7e8bd", "versionInfo": "v2.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:clipperhouse:uax29\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/clipperhouse/uax29@v2.7.0#v2"}]}, {"name": "github.com/clipperhouse/uax29/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-ccb03ddcd5d95d47", "versionInfo": "v2.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:clipperhouse:uax29\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/clipperhouse/uax29@v2.7.0#v2"}]}, {"name": "github.com/cloudflare/circl", "SPDXID": "SPDXRef-Package-go-module-github.com-cloudflare-circl-3321c9be70fde1d7", "versionInfo": "v1.6.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cloudflare:circl:v1.6.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cloudflare/circl@v1.6.3"}]}, {"name": "github.com/cloudflare/circl", "SPDXID": "SPDXRef-Package-go-module-github.com-cloudflare-circl-5469dd14292c730b", "versionInfo": "v1.6.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cloudflare:circl:v1.6.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cloudflare/circl@v1.6.3"}]}, {"name": "github.com/cncf/xds/go", "SPDXID": "SPDXRef-Package-go-module-github.com-cncf-xds-go-8f94fd943c978725", "versionInfo": "v0.0.0-20260202195803-dba9d589def2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cncf:xds\\/go:v0.0.0-20260202195803-dba9d589def2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cncf/xds@v0.0.0-20260202195803-dba9d589def2#go"}]}, {"name": "github.com/cncf/xds/go", "SPDXID": "SPDXRef-Package-go-module-github.com-cncf-xds-go-bb6d4947b9e4a6f1", "versionInfo": "v0.0.0-20260202195803-dba9d589def2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cncf:xds\\/go:v0.0.0-20260202195803-dba9d589def2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cncf/xds@v0.0.0-20260202195803-dba9d589def2#go"}]}, {"name": "github.com/containerd/cgroups/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-cgroups-v3-aa9d8549cb3cc99f", "versionInfo": "v3.1.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:cgroups\\/v3:v3.1.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/cgroups@v3.1.3#v3"}]}, {"name": "github.com/containerd/cgroups/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-cgroups-v3-3a2f25a12ed65cd5", "versionInfo": "v3.1.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:cgroups\\/v3:v3.1.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/cgroups@v3.1.3#v3"}]}, {"name": "github.com/containerd/containerd/api", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-9c3ce79e595a4342", "versionInfo": "v1.11.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:containerd\\/api:v1.11.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/containerd@v1.11.1#api"}]}, {"name": "github.com/containerd/containerd/api", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-e59a89d299e9636a", "versionInfo": "v1.11.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:containerd\\/api:v1.11.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/containerd@v1.11.1#api"}]}, {"name": "github.com/containerd/containerd/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-71119c1eb15a00f5", "versionInfo": "v2.3.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:containerd\\/v2:v2.3.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/containerd@v2.3.5#v2"}]}, {"name": "github.com/containerd/containerd/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-12df7c44943766c5", "versionInfo": "v2.3.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:containerd\\/v2:v2.3.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/containerd@v2.3.5#v2"}]}, {"name": "github.com/containerd/continuity", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-continuity-7f1a611b3f9137b4", "versionInfo": "v0.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:continuity:v0.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/continuity@v0.5.0"}]}, {"name": "github.com/containerd/continuity", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-continuity-09913402da2bebd2", "versionInfo": "v0.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:continuity:v0.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/continuity@v0.5.0"}]}, {"name": "github.com/containerd/errdefs", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-errdefs-9500bbb18a20f8fd", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:errdefs:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/errdefs@v1.0.0"}]}, {"name": "github.com/containerd/errdefs", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-errdefs-bed4d1bdb0281132", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:errdefs:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/errdefs@v1.0.0"}]}, {"name": "github.com/containerd/errdefs/pkg", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-d39d8b735782a363", "versionInfo": "v0.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:errdefs\\/pkg:v0.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/errdefs@v0.3.0#pkg"}]}, {"name": "github.com/containerd/errdefs/pkg", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-186edabe71c9ad88", "versionInfo": "v0.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:errdefs\\/pkg:v0.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/errdefs@v0.3.0#pkg"}]}, {"name": "github.com/containerd/fifo", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-fifo-ee7344eaf8bc6e76", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:fifo:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/fifo@v1.1.0"}]}, {"name": "github.com/containerd/fifo", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-fifo-ec32d4f3c1dd3d82", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:fifo:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/fifo@v1.1.0"}]}, {"name": "github.com/containerd/log", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-log-776746ff425dcb22", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:log:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/log@v0.1.0"}]}, {"name": "github.com/containerd/log", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-log-4e3b1ca6b33bf8f3", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:log:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/log@v0.1.0"}]}, {"name": "github.com/containerd/platforms", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-platforms-2dec2875b7093ea8", "versionInfo": "v1.0.0-rc.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:platforms:v1.0.0-rc.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/platforms@v1.0.0-rc.5"}]}, {"name": "github.com/containerd/platforms", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-platforms-f424b0c135c58b76", "versionInfo": "v1.0.0-rc.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:platforms:v1.0.0-rc.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/platforms@v1.0.0-rc.5"}]}, {"name": "github.com/containerd/plugin", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-plugin-11c9a98ed3392369", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:plugin:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/plugin@v1.1.0"}]}, {"name": "github.com/containerd/plugin", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-plugin-0a152c899dee64d6", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:plugin:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/plugin@v1.1.0"}]}, {"name": "github.com/containerd/ttrpc", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-a569b4682e0d9975", "versionInfo": "v1.2.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:ttrpc:v1.2.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/ttrpc@v1.2.8"}]}, {"name": "github.com/containerd/ttrpc", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-01c44ce7f35117a8", "versionInfo": "v1.2.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:ttrpc:v1.2.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/ttrpc@v1.2.8"}]}, {"name": "github.com/containerd/typeurl/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-d0f76cbf0caf583d", "versionInfo": "v2.2.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:typeurl\\/v2:v2.2.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/typeurl@v2.2.3#v2"}]}, {"name": "github.com/containerd/typeurl/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-3c26647b5d235555", "versionInfo": "v2.2.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:typeurl\\/v2:v2.2.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/typeurl@v2.2.3#v2"}]}, {"name": "github.com/cyphar/filepath-securejoin", "SPDXID": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-60f22c630e98f3bd", "versionInfo": "v0.6.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyphar:filepath-securejoin:v0.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyphar:filepath_securejoin:v0.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cyphar/filepath-securejoin@v0.6.1"}]}, {"name": "github.com/cyphar/filepath-securejoin", "SPDXID": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-c632809b2eab0c3a", "versionInfo": "v0.6.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyphar:filepath-securejoin:v0.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyphar:filepath_securejoin:v0.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cyphar/filepath-securejoin@v0.6.1"}]}, {"name": "github.com/dave/jennifer", "SPDXID": "SPDXRef-Package-go-module-github.com-dave-jennifer-be9c0054c83ff877", "versionInfo": "v1.7.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dave:jennifer:v1.7.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/dave/jennifer@v1.7.1"}]}, {"name": "github.com/dave/jennifer", "SPDXID": "SPDXRef-Package-go-module-github.com-dave-jennifer-d45c2a6ed6372d51", "versionInfo": "v1.7.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dave:jennifer:v1.7.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/dave/jennifer@v1.7.1"}]}, {"name": "github.com/deitch/magic", "SPDXID": "SPDXRef-Package-go-module-github.com-deitch-magic-21fe7058dddd40ea", "versionInfo": "v0.0.0-20240306090643-c67ab88f10cb", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:deitch:magic:v0.0.0-20240306090643-c67ab88f10cb:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/deitch/magic@v0.0.0-20240306090643-c67ab88f10cb"}]}, {"name": "github.com/deitch/magic", "SPDXID": "SPDXRef-Package-go-module-github.com-deitch-magic-342f28875f321f14", "versionInfo": "v0.0.0-20240306090643-c67ab88f10cb", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:deitch:magic:v0.0.0-20240306090643-c67ab88f10cb:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/deitch/magic@v0.0.0-20240306090643-c67ab88f10cb"}]}, {"name": "github.com/diskfs/go-diskfs", "SPDXID": "SPDXRef-Package-go-module-github.com-diskfs-go-diskfs-fe9866484f84562c", "versionInfo": "v1.9.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:diskfs:go-diskfs:v1.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:diskfs:go_diskfs:v1.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/diskfs/go-diskfs@v1.9.4"}]}, {"name": "github.com/diskfs/go-diskfs", "SPDXID": "SPDXRef-Package-go-module-github.com-diskfs-go-diskfs-95e534d2b9953041", "versionInfo": "v1.9.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:diskfs:go-diskfs:v1.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:diskfs:go_diskfs:v1.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/diskfs/go-diskfs@v1.9.4"}]}, {"name": "github.com/distribution/reference", "SPDXID": "SPDXRef-Package-go-module-github.com-distribution-reference-5cf5bbf310c710d0", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:distribution:reference:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/distribution/reference@v0.6.0"}]}, {"name": "github.com/distribution/reference", "SPDXID": "SPDXRef-Package-go-module-github.com-distribution-reference-5abfaf7335d7e3ca", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:distribution:reference:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/distribution/reference@v0.6.0"}]}, {"name": "github.com/docker/cli", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-cli-bcefd6de8b76e6f7", "versionInfo": "v29.8.0+incompatible", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:cli:v29.8.0\\+incompatible:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/cli@v29.8.0%2Bincompatible"}]}, {"name": "github.com/docker/cli", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-cli-6f07da6ba89d5570", "versionInfo": "v29.8.0+incompatible", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:cli:v29.8.0\\+incompatible:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/cli@v29.8.0%2Bincompatible"}]}, {"name": "github.com/docker/docker", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-docker-3b44c4726d0f371d", "versionInfo": "v28.5.2+incompatible", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:docker:v28.5.2\\+incompatible:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/docker@v28.5.2%2Bincompatible"}]}, {"name": "github.com/docker/docker", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-docker-6fd4058463b1fd70", "versionInfo": "v28.5.2+incompatible", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:docker:v28.5.2\\+incompatible:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/docker@v28.5.2%2Bincompatible"}]}, {"name": "github.com/docker/docker-credential-helpers", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-fdcd0f78d56ec20a", "versionInfo": "v0.9.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:docker-credential-helpers:v0.9.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:docker_credential_helpers:v0.9.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.5"}]}, {"name": "github.com/docker/docker-credential-helpers", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-9ee8f882f81cf745", "versionInfo": "v0.9.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:docker-credential-helpers:v0.9.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:docker_credential_helpers:v0.9.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.5"}]}, {"name": "github.com/docker/go-connections", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-go-connections-166704c30495edb9", "versionInfo": "v0.8.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go-connections:v0.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go_connections:v0.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/go-connections@v0.8.1"}]}, {"name": "github.com/docker/go-connections", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-go-connections-ebdd305c229aed7a", "versionInfo": "v0.8.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go-connections:v0.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go_connections:v0.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/go-connections@v0.8.1"}]}, {"name": "github.com/docker/go-units", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-go-units-a9271522b4f3233c", "versionInfo": "v0.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go-units:v0.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go_units:v0.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/go-units@v0.5.0"}]}, {"name": "github.com/docker/go-units", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-go-units-2e1611e917f93a59", "versionInfo": "v0.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go-units:v0.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go_units:v0.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/go-units@v0.5.0"}]}, {"name": "github.com/dsnet/compress", "SPDXID": "SPDXRef-Package-go-module-github.com-dsnet-compress-be3aa40eb3d00bc6", "versionInfo": "v0.0.2-0.20230904184137-39efe44ab707", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dsnet:compress:v0.0.2-0.20230904184137-39efe44ab707:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/dsnet/compress@v0.0.2-0.20230904184137-39efe44ab707"}]}, {"name": "github.com/dsnet/compress", "SPDXID": "SPDXRef-Package-go-module-github.com-dsnet-compress-0c35e1bcc0278448", "versionInfo": "v0.0.2-0.20230904184137-39efe44ab707", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dsnet:compress:v0.0.2-0.20230904184137-39efe44ab707:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/dsnet/compress@v0.0.2-0.20230904184137-39efe44ab707"}]}, {"name": "github.com/dustin/go-humanize", "SPDXID": "SPDXRef-Package-go-module-github.com-dustin-go-humanize-8432997ae2bcf2c7", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dustin:go-humanize:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dustin:go_humanize:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/dustin/go-humanize@v1.0.1"}]}, {"name": "github.com/dustin/go-humanize", "SPDXID": "SPDXRef-Package-go-module-github.com-dustin-go-humanize-15e8a80a80b60385", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dustin:go-humanize:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dustin:go_humanize:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/dustin/go-humanize@v1.0.1"}]}, {"name": "github.com/elliotchance/phpserialize", "SPDXID": "SPDXRef-Package-go-module-github.com-elliotchance-phpserialize-dd61f858e32823a2", "versionInfo": "v1.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:elliotchance:phpserialize:v1.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/elliotchance/phpserialize@v1.4.0"}]}, {"name": "github.com/elliotchance/phpserialize", "SPDXID": "SPDXRef-Package-go-module-github.com-elliotchance-phpserialize-0388e3fa7cbb825a", "versionInfo": "v1.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:elliotchance:phpserialize:v1.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/elliotchance/phpserialize@v1.4.0"}]}, {"name": "github.com/emirpasic/gods", "SPDXID": "SPDXRef-Package-go-module-github.com-emirpasic-gods-091896950bf83083", "versionInfo": "v1.18.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:emirpasic:gods:v1.18.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/emirpasic/gods@v1.18.1"}]}, {"name": "github.com/emirpasic/gods", "SPDXID": "SPDXRef-Package-go-module-github.com-emirpasic-gods-9882f7bacdc174a6", "versionInfo": "v1.18.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:emirpasic:gods:v1.18.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/emirpasic/gods@v1.18.1"}]}, {"name": "github.com/envoyproxy/go-control-plane/envoy", "SPDXID": "SPDXRef-Package-go-module-github.com-envoyproxy-go-control-plane-envoy-77d8e9d5a1ad9592", "versionInfo": "v1.37.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:envoyproxy:go-control-plane\\/envoy:v1.37.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:envoyproxy:go_control_plane\\/envoy:v1.37.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/envoyproxy/go-control-plane@v1.37.0#envoy"}]}, {"name": "github.com/envoyproxy/go-control-plane/envoy", "SPDXID": "SPDXRef-Package-go-module-github.com-envoyproxy-go-control-plane-envoy-a8616ba298930e9f", "versionInfo": "v1.37.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:envoyproxy:go-control-plane\\/envoy:v1.37.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:envoyproxy:go_control_plane\\/envoy:v1.37.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/envoyproxy/go-control-plane@v1.37.0#envoy"}]}, {"name": "github.com/envoyproxy/protoc-gen-validate", "SPDXID": "SPDXRef-Package-go-module-github.com-envoyproxy-protoc-gen-validate-08b32ee1d7cb95d6", "versionInfo": "v1.3.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:envoyproxy:protoc-gen-validate:v1.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:envoyproxy:protoc_gen_validate:v1.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.3.3"}]}, {"name": "github.com/envoyproxy/protoc-gen-validate", "SPDXID": "SPDXRef-Package-go-module-github.com-envoyproxy-protoc-gen-validate-50ebd3003a0dd4eb", "versionInfo": "v1.3.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:envoyproxy:protoc-gen-validate:v1.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:envoyproxy:protoc_gen_validate:v1.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.3.3"}]}, {"name": "github.com/erikgeiser/coninput", "SPDXID": "SPDXRef-Package-go-module-github.com-erikgeiser-coninput-1284b838dcd5a2b7", "versionInfo": "v0.0.0-20211004153227-1c3628e74d0f", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:erikgeiser:coninput:v0.0.0-20211004153227-1c3628e74d0f:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/erikgeiser/coninput@v0.0.0-20211004153227-1c3628e74d0f"}]}, {"name": "github.com/erikgeiser/coninput", "SPDXID": "SPDXRef-Package-go-module-github.com-erikgeiser-coninput-a328e450f99eeeba", "versionInfo": "v0.0.0-20211004153227-1c3628e74d0f", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:erikgeiser:coninput:v0.0.0-20211004153227-1c3628e74d0f:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/erikgeiser/coninput@v0.0.0-20211004153227-1c3628e74d0f"}]}, {"name": "github.com/facebookincubator/nvdtools", "SPDXID": "SPDXRef-Package-go-module-github.com-facebookincubator-nvdtools-f69d28a391d9a839", "versionInfo": "v0.1.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:facebookincubator:nvdtools:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/facebookincubator/nvdtools@v0.1.5"}]}, {"name": "github.com/facebookincubator/nvdtools", "SPDXID": "SPDXRef-Package-go-module-github.com-facebookincubator-nvdtools-7449b3696de286e0", "versionInfo": "v0.1.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:facebookincubator:nvdtools:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/facebookincubator/nvdtools@v0.1.5"}]}, {"name": "github.com/fatih/color", "SPDXID": "SPDXRef-Package-go-module-github.com-fatih-color-71360e4063543be3", "versionInfo": "v1.19.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fatih:color:v1.19.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fatih/color@v1.19.0"}]}, {"name": "github.com/fatih/color", "SPDXID": "SPDXRef-Package-go-module-github.com-fatih-color-7ebedeaf520cc1eb", "versionInfo": "v1.19.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fatih:color:v1.19.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fatih/color@v1.19.0"}]}, {"name": "github.com/felixge/fgprof", "SPDXID": "SPDXRef-Package-go-module-github.com-felixge-fgprof-10e51b0cf504540d", "versionInfo": "v0.9.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:felixge:fgprof:v0.9.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/felixge/fgprof@v0.9.5"}]}, {"name": "github.com/felixge/fgprof", "SPDXID": "SPDXRef-Package-go-module-github.com-felixge-fgprof-897949eb0b027cfe", "versionInfo": "v0.9.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:felixge:fgprof:v0.9.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/felixge/fgprof@v0.9.5"}]}, {"name": "github.com/felixge/httpsnoop", "SPDXID": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-208481c695126b4d", "versionInfo": "v1.0.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:felixge:httpsnoop:v1.0.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/felixge/httpsnoop@v1.0.4"}]}, {"name": "github.com/felixge/httpsnoop", "SPDXID": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-518d951fe65e50b3", "versionInfo": "v1.0.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:felixge:httpsnoop:v1.0.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/felixge/httpsnoop@v1.0.4"}]}, {"name": "github.com/fsnotify/fsnotify", "SPDXID": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-7784241df9ad0fe0", "versionInfo": "v1.9.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fsnotify:fsnotify:v1.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fsnotify/fsnotify@v1.9.0"}]}, {"name": "github.com/fsnotify/fsnotify", "SPDXID": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-0b90bc9a5a5b1807", "versionInfo": "v1.9.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fsnotify:fsnotify:v1.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fsnotify/fsnotify@v1.9.0"}]}, {"name": "github.com/gabriel-vasile/mimetype", "SPDXID": "SPDXRef-Package-go-module-github.com-gabriel-vasile-mimetype-32583b205e9b1eb8", "versionInfo": "v1.4.15", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gabriel-vasile:mimetype:v1.4.15:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gabriel_vasile:mimetype:v1.4.15:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gabriel:mimetype:v1.4.15:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gabriel-vasile/mimetype@v1.4.15"}]}, {"name": "github.com/gabriel-vasile/mimetype", "SPDXID": "SPDXRef-Package-go-module-github.com-gabriel-vasile-mimetype-f14faaa3e1dbf357", "versionInfo": "v1.4.15", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gabriel-vasile:mimetype:v1.4.15:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gabriel_vasile:mimetype:v1.4.15:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gabriel:mimetype:v1.4.15:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gabriel-vasile/mimetype@v1.4.15"}]}, {"name": "github.com/github/go-spdx/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-github-go-spdx-v2-004cc588d165df0b", "versionInfo": "v2.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github:go-spdx\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github:go_spdx\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/github/go-spdx@v2.7.0#v2"}]}, {"name": "github.com/github/go-spdx/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-github-go-spdx-v2-04627d3d9421aac7", "versionInfo": "v2.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github:go-spdx\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github:go_spdx\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/github/go-spdx@v2.7.0#v2"}]}, {"name": "github.com/gkampitakis/ciinfo", "SPDXID": "SPDXRef-Package-go-module-github.com-gkampitakis-ciinfo-3ecfbf738588f0de", "versionInfo": "v0.3.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gkampitakis:ciinfo:v0.3.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gkampitakis/ciinfo@v0.3.4"}]}, {"name": "github.com/gkampitakis/ciinfo", "SPDXID": "SPDXRef-Package-go-module-github.com-gkampitakis-ciinfo-c303288e26fa3dd8", "versionInfo": "v0.3.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gkampitakis:ciinfo:v0.3.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gkampitakis/ciinfo@v0.3.4"}]}, {"name": "github.com/gkampitakis/go-snaps", "SPDXID": "SPDXRef-Package-go-module-github.com-gkampitakis-go-snaps-07da3958600bec9b", "versionInfo": "v0.5.23", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gkampitakis:go-snaps:v0.5.23:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gkampitakis:go_snaps:v0.5.23:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gkampitakis/go-snaps@v0.5.23"}]}, {"name": "github.com/gkampitakis/go-snaps", "SPDXID": "SPDXRef-Package-go-module-github.com-gkampitakis-go-snaps-859e3d70396d3bcc", "versionInfo": "v0.5.23", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gkampitakis:go-snaps:v0.5.23:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gkampitakis:go_snaps:v0.5.23:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gkampitakis/go-snaps@v0.5.23"}]}, {"name": "github.com/glebarez/go-sqlite", "SPDXID": "SPDXRef-Package-go-module-github.com-glebarez-go-sqlite-b1404a6a7e23cf96", "versionInfo": "v1.22.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:glebarez:go-sqlite:v1.22.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:glebarez:go_sqlite:v1.22.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/glebarez/go-sqlite@v1.22.0"}]}, {"name": "github.com/glebarez/go-sqlite", "SPDXID": "SPDXRef-Package-go-module-github.com-glebarez-go-sqlite-2abff422cfbd2e31", "versionInfo": "v1.22.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:glebarez:go-sqlite:v1.22.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:glebarez:go_sqlite:v1.22.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/glebarez/go-sqlite@v1.22.0"}]}, {"name": "github.com/glebarez/sqlite", "SPDXID": "SPDXRef-Package-go-module-github.com-glebarez-sqlite-68e4a808f7195d7c", "versionInfo": "v1.11.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:glebarez:sqlite:v1.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/glebarez/sqlite@v1.11.0"}]}, {"name": "github.com/glebarez/sqlite", "SPDXID": "SPDXRef-Package-go-module-github.com-glebarez-sqlite-3bd05babb7faa2f7", "versionInfo": "v1.11.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:glebarez:sqlite:v1.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/glebarez/sqlite@v1.11.0"}]}, {"name": "github.com/go-git/gcfg", "SPDXID": "SPDXRef-Package-go-module-github.com-go-git-gcfg-9363818d11b9e55a", "versionInfo": "v1.5.1-0.20230307220236-3a3c6141e376", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-git:gcfg:v1.5.1-0.20230307220236-3a3c6141e376:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_git:gcfg:v1.5.1-0.20230307220236-3a3c6141e376:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:gcfg:v1.5.1-0.20230307220236-3a3c6141e376:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-git/gcfg@v1.5.1-0.20230307220236-3a3c6141e376"}]}, {"name": "github.com/go-git/gcfg", "SPDXID": "SPDXRef-Package-go-module-github.com-go-git-gcfg-9e7047dc06a3a8b0", "versionInfo": "v1.5.1-0.20230307220236-3a3c6141e376", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-git:gcfg:v1.5.1-0.20230307220236-3a3c6141e376:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_git:gcfg:v1.5.1-0.20230307220236-3a3c6141e376:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:gcfg:v1.5.1-0.20230307220236-3a3c6141e376:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-git/gcfg@v1.5.1-0.20230307220236-3a3c6141e376"}]}, {"name": "github.com/go-git/go-billy/v5", "SPDXID": "SPDXRef-Package-go-module-github.com-go-git-go-billy-v5-ba992b50ca69d442", "versionInfo": "v5.9.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-git:go-billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-git:go_billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_git:go-billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_git:go_billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-git/go-billy@v5.9.1#v5"}]}, {"name": "github.com/go-git/go-billy/v5", "SPDXID": "SPDXRef-Package-go-module-github.com-go-git-go-billy-v5-3bf9f6156c0fbf1c", "versionInfo": "v5.9.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-git:go-billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-git:go_billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_git:go-billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_git:go_billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-git/go-billy@v5.9.1#v5"}]}, {"name": "github.com/go-git/go-git/v5", "SPDXID": "SPDXRef-Package-go-module-github.com-go-git-go-git-v5-9fc26012aa6c7546", "versionInfo": "v5.19.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-git:go-git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-git:go_git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_git:go-git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_git:go_git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-git/go-git@v5.19.2#v5"}]}, {"name": "github.com/go-git/go-git/v5", "SPDXID": "SPDXRef-Package-go-module-github.com-go-git-go-git-v5-60d97eba3e94ba3a", "versionInfo": "v5.19.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-git:go-git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-git:go_git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_git:go-git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_git:go_git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-git/go-git@v5.19.2#v5"}]}, {"name": "github.com/go-jose/go-jose/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-41a8099e429d2e26", "versionInfo": "v4.1.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-jose/go-jose@v4.1.4#v4"}]}, {"name": "github.com/go-jose/go-jose/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-93c6bb4d47b6a45b", "versionInfo": "v4.1.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-jose/go-jose@v4.1.4#v4"}]}, {"name": "github.com/go-logr/logr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-logr-1ecd2131fa62597f", "versionInfo": "v1.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:logr:v1.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:logr:v1.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:logr:v1.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/logr@v1.4.3"}]}, {"name": "github.com/go-logr/logr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-logr-8915d6e41608a2d6", "versionInfo": "v1.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:logr:v1.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:logr:v1.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:logr:v1.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/logr@v1.4.3"}]}, {"name": "github.com/go-logr/stdr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-stdr-ed7921825a53d3f4", "versionInfo": "v1.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/stdr@v1.2.2"}]}, {"name": "github.com/go-logr/stdr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-stdr-d99b2f24b8ed3ba7", "versionInfo": "v1.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/stdr@v1.2.2"}]}, {"name": "github.com/go-restruct/restruct", "SPDXID": "SPDXRef-Package-go-module-github.com-go-restruct-restruct-ef53ed4c6fbe2f06", "versionInfo": "v1.2.0-alpha", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-restruct:restruct:v1.2.0-alpha:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_restruct:restruct:v1.2.0-alpha:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:restruct:v1.2.0-alpha:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-restruct/restruct@v1.2.0-alpha"}]}, {"name": "github.com/go-restruct/restruct", "SPDXID": "SPDXRef-Package-go-module-github.com-go-restruct-restruct-ab894547f3216718", "versionInfo": "v1.2.0-alpha", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-restruct:restruct:v1.2.0-alpha:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_restruct:restruct:v1.2.0-alpha:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:restruct:v1.2.0-alpha:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-restruct/restruct@v1.2.0-alpha"}]}, {"name": "github.com/go-test/deep", "SPDXID": "SPDXRef-Package-go-module-github.com-go-test-deep-83b71898925befa2", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-test:deep:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_test:deep:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:deep:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-test/deep@v1.1.1"}]}, {"name": "github.com/go-test/deep", "SPDXID": "SPDXRef-Package-go-module-github.com-go-test-deep-142d187d8cd402ca", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-test:deep:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_test:deep:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:deep:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-test/deep@v1.1.1"}]}, {"name": "github.com/go-viper/mapstructure/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-69e67edfc2286e18", "versionInfo": "v2.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-viper/mapstructure@v2.5.0#v2"}]}, {"name": "github.com/go-viper/mapstructure/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-ef025f2989091946", "versionInfo": "v2.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-viper/mapstructure@v2.5.0#v2"}]}, {"name": "github.com/goccy/go-yaml", "SPDXID": "SPDXRef-Package-go-module-github.com-goccy-go-yaml-efc377de37bce13b", "versionInfo": "v1.19.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:goccy:go-yaml:v1.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:goccy:go_yaml:v1.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/goccy/go-yaml@v1.19.2"}]}, {"name": "github.com/goccy/go-yaml", "SPDXID": "SPDXRef-Package-go-module-github.com-goccy-go-yaml-de03f883d01ca3b8", "versionInfo": "v1.19.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/.make/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:goccy:go-yaml:v1.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:goccy:go_yaml:v1.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/goccy/go-yaml@v1.19.2"}]}, {"name": "github.com/goccy/go-yaml", "SPDXID": "SPDXRef-Package-go-module-github.com-goccy-go-yaml-7f64f219e5750427", "versionInfo": "v1.19.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:goccy:go-yaml:v1.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:goccy:go_yaml:v1.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/goccy/go-yaml@v1.19.2"}]}, {"name": "github.com/gocsaf/csaf/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-gocsaf-csaf-v3-4bd9ec16e5b86a68", "versionInfo": "v3.5.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gocsaf:csaf\\/v3:v3.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gocsaf/csaf@v3.5.1#v3"}]}, {"name": "github.com/gocsaf/csaf/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-gocsaf-csaf-v3-31257fde00fe839d", "versionInfo": "v3.5.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gocsaf:csaf\\/v3:v3.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gocsaf/csaf@v3.5.1#v3"}]}, {"name": "github.com/gogo/protobuf", "SPDXID": "SPDXRef-Package-go-module-github.com-gogo-protobuf-bd0ec7045718a6c6", "versionInfo": "v1.3.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gogo:protobuf:v1.3.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gogo/protobuf@v1.3.2"}]}, {"name": "github.com/gogo/protobuf", "SPDXID": "SPDXRef-Package-go-module-github.com-gogo-protobuf-9d2815b4087c2824", "versionInfo": "v1.3.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gogo:protobuf:v1.3.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gogo/protobuf@v1.3.2"}]}, {"name": "github.com/gohugoio/hashstructure", "SPDXID": "SPDXRef-Package-go-module-github.com-gohugoio-hashstructure-6736c6550c52be1f", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gohugoio:hashstructure:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gohugoio/hashstructure@v0.6.0"}]}, {"name": "github.com/gohugoio/hashstructure", "SPDXID": "SPDXRef-Package-go-module-github.com-gohugoio-hashstructure-3421f160f14a663e", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gohugoio:hashstructure:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gohugoio/hashstructure@v0.6.0"}]}, {"name": "github.com/golang/groupcache", "SPDXID": "SPDXRef-Package-go-module-github.com-golang-groupcache-bd00e3e04a73c5bc", "versionInfo": "v0.0.0-20241129210726-2c02b8208cf8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:groupcache:v0.0.0-20241129210726-2c02b8208cf8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/golang/groupcache@v0.0.0-20241129210726-2c02b8208cf8"}]}, {"name": "github.com/golang/groupcache", "SPDXID": "SPDXRef-Package-go-module-github.com-golang-groupcache-9ba43ef89138f46f", "versionInfo": "v0.0.0-20241129210726-2c02b8208cf8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:groupcache:v0.0.0-20241129210726-2c02b8208cf8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/golang/groupcache@v0.0.0-20241129210726-2c02b8208cf8"}]}, {"name": "github.com/google/go-cmp", "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-cmp-473d0adb4b419c7e", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go-cmp:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go_cmp:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/go-cmp@v0.7.0"}]}, {"name": "github.com/google/go-cmp", "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-cmp-dbdeead1e743947d", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go-cmp:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go_cmp:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/go-cmp@v0.7.0"}]}, {"name": "github.com/google/go-containerregistry", "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-a0b833e866fd1de5", "versionInfo": "v0.22.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go-containerregistry:v0.22.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go_containerregistry:v0.22.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/go-containerregistry@v0.22.1"}]}, {"name": "github.com/google/go-containerregistry", "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-0d3769a7c8360885", "versionInfo": "v0.22.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go-containerregistry:v0.22.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go_containerregistry:v0.22.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/go-containerregistry@v0.22.1"}]}, {"name": "github.com/google/licensecheck", "SPDXID": "SPDXRef-Package-go-module-github.com-google-licensecheck-90d357fe0a30faf0", "versionInfo": "v0.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:licensecheck:v0.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/licensecheck@v0.3.1"}]}, {"name": "github.com/google/licensecheck", "SPDXID": "SPDXRef-Package-go-module-github.com-google-licensecheck-8505a05a46d1b815", "versionInfo": "v0.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:licensecheck:v0.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/licensecheck@v0.3.1"}]}, {"name": "github.com/google/pprof", "SPDXID": "SPDXRef-Package-go-module-github.com-google-pprof-0f80dceb464406c3", "versionInfo": "v0.0.0-20260802141513-ef3492d7dac3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:pprof:v0.0.0-20260802141513-ef3492d7dac3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/pprof@v0.0.0-20260802141513-ef3492d7dac3"}]}, {"name": "github.com/google/pprof", "SPDXID": "SPDXRef-Package-go-module-github.com-google-pprof-dc71604f4aa2cdf3", "versionInfo": "v0.0.0-20260802141513-ef3492d7dac3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:pprof:v0.0.0-20260802141513-ef3492d7dac3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/pprof@v0.0.0-20260802141513-ef3492d7dac3"}]}, {"name": "github.com/google/s2a-go", "SPDXID": "SPDXRef-Package-go-module-github.com-google-s2a-go-ac7cd253b4e1753e", "versionInfo": "v0.1.9", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:s2a-go:v0.1.9:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:s2a_go:v0.1.9:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/s2a-go@v0.1.9"}]}, {"name": "github.com/google/s2a-go", "SPDXID": "SPDXRef-Package-go-module-github.com-google-s2a-go-83e4bfe2eec9c3b5", "versionInfo": "v0.1.9", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:s2a-go:v0.1.9:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:s2a_go:v0.1.9:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/s2a-go@v0.1.9"}]}, {"name": "github.com/google/shlex", "SPDXID": "SPDXRef-Package-go-module-github.com-google-shlex-0b060ec91a1d2de4", "versionInfo": "v0.0.0-20191202100458-e7afc7fbc510", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:shlex:v0.0.0-20191202100458-e7afc7fbc510:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/shlex@v0.0.0-20191202100458-e7afc7fbc510"}]}, {"name": "github.com/google/shlex", "SPDXID": "SPDXRef-Package-go-module-github.com-google-shlex-5307b82659ec16f4", "versionInfo": "v0.0.0-20191202100458-e7afc7fbc510", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:shlex:v0.0.0-20191202100458-e7afc7fbc510:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/shlex@v0.0.0-20191202100458-e7afc7fbc510"}]}, {"name": "github.com/google/uuid", "SPDXID": "SPDXRef-Package-go-module-github.com-google-uuid-89828cd946b73006", "versionInfo": "v1.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/golang/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:uuid:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/uuid@v1.3.0"}]}, {"name": "github.com/google/uuid", "SPDXID": "SPDXRef-Package-go-module-github.com-google-uuid-f6424607fde0264b", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/uuid@v1.6.0"}]}, {"name": "github.com/google/uuid", "SPDXID": "SPDXRef-Package-go-module-github.com-google-uuid-660a1132eb0c981a", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/uuid@v1.6.0"}]}, {"name": "github.com/googleapis/enterprise-certificate-proxy", "SPDXID": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-90cdda88980ab61c", "versionInfo": "v0.3.20", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:enterprise-certificate-proxy:v0.3.20:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:enterprise_certificate_proxy:v0.3.20:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.20"}]}, {"name": "github.com/googleapis/enterprise-certificate-proxy", "SPDXID": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-4e20e0d091a2600a", "versionInfo": "v0.3.20", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:enterprise-certificate-proxy:v0.3.20:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:enterprise_certificate_proxy:v0.3.20:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.20"}]}, {"name": "github.com/googleapis/gax-go/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-9629f04d1b10a6ad", "versionInfo": "v2.24.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:gax-go\\/v2:v2.24.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:gax_go\\/v2:v2.24.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/googleapis/gax-go@v2.24.0#v2"}]}, {"name": "github.com/googleapis/gax-go/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-ca67e04589c6607d", "versionInfo": "v2.24.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:gax-go\\/v2:v2.24.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:gax_go\\/v2:v2.24.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/googleapis/gax-go@v2.24.0#v2"}]}, {"name": "github.com/gookit/color", "SPDXID": "SPDXRef-Package-go-module-github.com-gookit-color-dd914db4ce9f5e6d", "versionInfo": "v1.6.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gookit:color:v1.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gookit/color@v1.6.1"}]}, {"name": "github.com/gookit/color", "SPDXID": "SPDXRef-Package-go-module-github.com-gookit-color-0d2092096a50babd", "versionInfo": "v1.6.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gookit:color:v1.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gookit/color@v1.6.1"}]}, {"name": "github.com/gpustack/gguf-parser-go", "SPDXID": "SPDXRef-Package-go-module-github.com-gpustack-gguf-parser-go-b14f8c1f2e55722f", "versionInfo": "v0.26.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gpustack:gguf-parser-go:v0.26.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gpustack:gguf_parser_go:v0.26.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gpustack/gguf-parser-go@v0.26.3"}]}, {"name": "github.com/gpustack/gguf-parser-go", "SPDXID": "SPDXRef-Package-go-module-github.com-gpustack-gguf-parser-go-3438527434a12ca9", "versionInfo": "v0.26.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gpustack:gguf-parser-go:v0.26.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gpustack:gguf_parser_go:v0.26.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gpustack/gguf-parser-go@v0.26.3"}]}, {"name": "github.com/hako/durafmt", "SPDXID": "SPDXRef-Package-go-module-github.com-hako-durafmt-7f31083339fa3e12", "versionInfo": "v0.0.0-20210608085754-5c1018a4e16b", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hako:durafmt:v0.0.0-20210608085754-5c1018a4e16b:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hako/durafmt@v0.0.0-20210608085754-5c1018a4e16b"}]}, {"name": "github.com/hako/durafmt", "SPDXID": "SPDXRef-Package-go-module-github.com-hako-durafmt-f294e38ba9d824f7", "versionInfo": "v0.0.0-20210608085754-5c1018a4e16b", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hako:durafmt:v0.0.0-20210608085754-5c1018a4e16b:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hako/durafmt@v0.0.0-20210608085754-5c1018a4e16b"}]}, {"name": "github.com/hashicorp/aws-sdk-go-base/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-aws-sdk-go-base-v2-c2bad78f077aaf53", "versionInfo": "v2.0.0-beta.74", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:aws-sdk-go-base\\/v2:v2.0.0-beta.74:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:aws_sdk_go_base\\/v2:v2.0.0-beta.74:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/aws-sdk-go-base@v2.0.0-beta.74#v2"}]}, {"name": "github.com/hashicorp/aws-sdk-go-base/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-aws-sdk-go-base-v2-3ccd6c5939fbb600", "versionInfo": "v2.0.0-beta.74", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:aws-sdk-go-base\\/v2:v2.0.0-beta.74:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:aws_sdk_go_base\\/v2:v2.0.0-beta.74:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/aws-sdk-go-base@v2.0.0-beta.74#v2"}]}, {"name": "github.com/hashicorp/errwrap", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-56b7e6360dd390d7", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:errwrap:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0"}]}, {"name": "github.com/hashicorp/errwrap", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-838e981d41a122f8", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:errwrap:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0"}]}, {"name": "github.com/hashicorp/go-cleanhttp", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-912d0981a4a0e36c", "versionInfo": "v0.5.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-cleanhttp:v0.5.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_cleanhttp:v0.5.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2"}]}, {"name": "github.com/hashicorp/go-cleanhttp", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-a26e9a05ef93c2a9", "versionInfo": "v0.5.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-cleanhttp:v0.5.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_cleanhttp:v0.5.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2"}]}, {"name": "github.com/hashicorp/go-getter", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-getter-16e827aec3c060b2", "versionInfo": "v1.8.9", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-getter:v1.8.9:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_getter:v1.8.9:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-getter@v1.8.9"}]}, {"name": "github.com/hashicorp/go-getter", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-getter-ac68d1815c73bbf0", "versionInfo": "v1.8.9", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-getter:v1.8.9:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_getter:v1.8.9:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-getter@v1.8.9"}]}, {"name": "github.com/hashicorp/go-multierror", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-b3d879cd60d2aaba", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-multierror:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_multierror:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1"}]}, {"name": "github.com/hashicorp/go-multierror", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-6aa0ba1322b99f59", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-multierror:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_multierror:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1"}]}, {"name": "github.com/hashicorp/go-version", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-86af37b79a61afc1", "versionInfo": "v1.9.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-version:v1.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_version:v1.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-version@v1.9.0"}]}, {"name": "github.com/hashicorp/go-version", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-3cf5222ba0aa9337", "versionInfo": "v1.9.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-version:v1.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_version:v1.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-version@v1.9.0"}]}, {"name": "github.com/hashicorp/golang-lru/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-golang-lru-v2-fc804484ec9835b3", "versionInfo": "v2.0.7", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:golang-lru\\/v2:v2.0.7:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:golang_lru\\/v2:v2.0.7:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/golang-lru@v2.0.7#v2"}]}, {"name": "github.com/hashicorp/golang-lru/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-golang-lru-v2-0792687989b60a42", "versionInfo": "v2.0.7", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:golang-lru\\/v2:v2.0.7:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:golang_lru\\/v2:v2.0.7:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/golang-lru@v2.0.7#v2"}]}, {"name": "github.com/hashicorp/hcl/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-1548adc7fef097b5", "versionInfo": "v2.24.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:hcl\\/v2:v2.24.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/hcl@v2.24.0#v2"}]}, {"name": "github.com/hashicorp/hcl/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-4a9b49ab2a1c2f38", "versionInfo": "v2.24.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:hcl\\/v2:v2.24.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/hcl@v2.24.0#v2"}]}, {"name": "github.com/henvic/httpretty", "SPDXID": "SPDXRef-Package-go-module-github.com-henvic-httpretty-ba82f7943cba0b8a", "versionInfo": "v0.1.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:henvic:httpretty:v0.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/henvic/httpretty@v0.1.4"}]}, {"name": "github.com/henvic/httpretty", "SPDXID": "SPDXRef-Package-go-module-github.com-henvic-httpretty-b48854afa73ed5e9", "versionInfo": "v0.1.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:henvic:httpretty:v0.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/henvic/httpretty@v0.1.4"}]}, {"name": "github.com/huandu/xstrings", "SPDXID": "SPDXRef-Package-go-module-github.com-huandu-xstrings-0634db5052d02338", "versionInfo": "v1.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:huandu:xstrings:v1.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/huandu/xstrings@v1.5.0"}]}, {"name": "github.com/huandu/xstrings", "SPDXID": "SPDXRef-Package-go-module-github.com-huandu-xstrings-bca5c55326f930d7", "versionInfo": "v1.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:huandu:xstrings:v1.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/huandu/xstrings@v1.5.0"}]}, {"name": "github.com/iancoleman/strcase", "SPDXID": "SPDXRef-Package-go-module-github.com-iancoleman-strcase-8d147435ded5ca4c", "versionInfo": "v0.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:iancoleman:strcase:v0.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/iancoleman/strcase@v0.3.0"}]}, {"name": "github.com/iancoleman/strcase", "SPDXID": "SPDXRef-Package-go-module-github.com-iancoleman-strcase-6b3592ba2329da13", "versionInfo": "v0.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:iancoleman:strcase:v0.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/iancoleman/strcase@v0.3.0"}]}, {"name": "github.com/in-toto/attestation", "SPDXID": "SPDXRef-Package-go-module-github.com-in-toto-attestation-b49317b38e020536", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:in-toto:attestation:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:in_toto:attestation:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:in:attestation:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/in-toto/attestation@v1.2.0"}]}, {"name": "github.com/in-toto/attestation", "SPDXID": "SPDXRef-Package-go-module-github.com-in-toto-attestation-685cf7e8830d2ed0", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:in-toto:attestation:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:in_toto:attestation:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:in:attestation:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/in-toto/attestation@v1.2.0"}]}, {"name": "github.com/inconshreveable/mousetrap", "SPDXID": "SPDXRef-Package-go-module-github.com-inconshreveable-mousetrap-f6300927a9f6b106", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:inconshreveable:mousetrap:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/inconshreveable/mousetrap@v1.1.0"}]}, {"name": "github.com/inconshreveable/mousetrap", "SPDXID": "SPDXRef-Package-go-module-github.com-inconshreveable-mousetrap-4961dbf7adbf98ca", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:inconshreveable:mousetrap:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/inconshreveable/mousetrap@v1.1.0"}]}, {"name": "github.com/invopop/jsonschema", "SPDXID": "SPDXRef-Package-go-module-github.com-invopop-jsonschema-03a72b1d075c72d8", "versionInfo": "v0.14.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:invopop:jsonschema:v0.14.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/invopop/jsonschema@v0.14.0"}]}, {"name": "github.com/invopop/jsonschema", "SPDXID": "SPDXRef-Package-go-module-github.com-invopop-jsonschema-bb26c5b35bf87043", "versionInfo": "v0.14.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:invopop:jsonschema:v0.14.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/invopop/jsonschema@v0.14.0"}]}, {"name": "github.com/jbenet/go-context", "SPDXID": "SPDXRef-Package-go-module-github.com-jbenet-go-context-bcb720b429ff9158", "versionInfo": "v0.0.0-20150711004518-d14ea06fba99", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jbenet:go-context:v0.0.0-20150711004518-d14ea06fba99:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jbenet:go_context:v0.0.0-20150711004518-d14ea06fba99:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jbenet/go-context@v0.0.0-20150711004518-d14ea06fba99"}]}, {"name": "github.com/jbenet/go-context", "SPDXID": "SPDXRef-Package-go-module-github.com-jbenet-go-context-64c893e3154f24c3", "versionInfo": "v0.0.0-20150711004518-d14ea06fba99", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jbenet:go-context:v0.0.0-20150711004518-d14ea06fba99:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jbenet:go_context:v0.0.0-20150711004518-d14ea06fba99:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jbenet/go-context@v0.0.0-20150711004518-d14ea06fba99"}]}, {"name": "github.com/jinzhu/copier", "SPDXID": "SPDXRef-Package-go-module-github.com-jinzhu-copier-88273d94b55e7a26", "versionInfo": "v0.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jinzhu:copier:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jinzhu/copier@v0.4.0"}]}, {"name": "github.com/jinzhu/copier", "SPDXID": "SPDXRef-Package-go-module-github.com-jinzhu-copier-742f7434b7b895e0", "versionInfo": "v0.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jinzhu:copier:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jinzhu/copier@v0.4.0"}]}, {"name": "github.com/jinzhu/inflection", "SPDXID": "SPDXRef-Package-go-module-github.com-jinzhu-inflection-7986b8830e14b933", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jinzhu:inflection:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jinzhu/inflection@v1.0.0"}]}, {"name": "github.com/jinzhu/inflection", "SPDXID": "SPDXRef-Package-go-module-github.com-jinzhu-inflection-7c43b08cd568963a", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jinzhu:inflection:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jinzhu/inflection@v1.0.0"}]}, {"name": "github.com/jinzhu/now", "SPDXID": "SPDXRef-Package-go-module-github.com-jinzhu-now-257bc1d78b7317c4", "versionInfo": "v1.1.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jinzhu:now:v1.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jinzhu/now@v1.1.5"}]}, {"name": "github.com/jinzhu/now", "SPDXID": "SPDXRef-Package-go-module-github.com-jinzhu-now-70ffb4ce7823ff12", "versionInfo": "v1.1.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jinzhu:now:v1.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jinzhu/now@v1.1.5"}]}, {"name": "github.com/json-iterator/go", "SPDXID": "SPDXRef-Package-go-module-github.com-json-iterator-go-b71b97451ba45321", "versionInfo": "v1.1.12", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json-iterator:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json_iterator:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/json-iterator/go@v1.1.12"}]}, {"name": "github.com/json-iterator/go", "SPDXID": "SPDXRef-Package-go-module-github.com-json-iterator-go-a2a9ed90cdb5e7e1", "versionInfo": "v1.1.12", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json-iterator:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json_iterator:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/json-iterator/go@v1.1.12"}]}, {"name": "github.com/kastenhq/goversion", "SPDXID": "SPDXRef-Package-go-module-github.com-kastenhq-goversion-155aa2cd49359133", "versionInfo": "v0.0.0-20230811215019-93b2f8823953", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:kastenhq:goversion:v0.0.0-20230811215019-93b2f8823953:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/kastenhq/goversion@v0.0.0-20230811215019-93b2f8823953"}]}, {"name": "github.com/kastenhq/goversion", "SPDXID": "SPDXRef-Package-go-module-github.com-kastenhq-goversion-83043a42b42f6e2c", "versionInfo": "v0.0.0-20230811215019-93b2f8823953", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:kastenhq:goversion:v0.0.0-20230811215019-93b2f8823953:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/kastenhq/goversion@v0.0.0-20230811215019-93b2f8823953"}]}, {"name": "github.com/kevinburke/ssh_config", "SPDXID": "SPDXRef-Package-go-module-github.com-kevinburke-ssh-config-69ac9358ec67970a", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:kevinburke:ssh-config:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:kevinburke:ssh_config:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/kevinburke/ssh_config@v1.2.0"}]}, {"name": "github.com/kevinburke/ssh_config", "SPDXID": "SPDXRef-Package-go-module-github.com-kevinburke-ssh-config-6f6f3dccfa565954", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:kevinburke:ssh-config:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:kevinburke:ssh_config:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/kevinburke/ssh_config@v1.2.0"}]}, {"name": "github.com/klauspost/compress", "SPDXID": "SPDXRef-Package-go-module-github.com-klauspost-compress-a1156147601ced7b", "versionInfo": "v1.20.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:klauspost:compress:v1.20.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/klauspost/compress@v1.20.0"}]}, {"name": "github.com/klauspost/compress", "SPDXID": "SPDXRef-Package-go-module-github.com-klauspost-compress-904139e84814eed7", "versionInfo": "v1.20.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:klauspost:compress:v1.20.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/klauspost/compress@v1.20.0"}]}, {"name": "github.com/klauspost/cpuid/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-klauspost-cpuid-v2-d80cd4af33eaf8e3", "versionInfo": "v2.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:klauspost:cpuid\\/v2:v2.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/klauspost/cpuid@v2.3.0#v2"}]}, {"name": "github.com/klauspost/cpuid/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-klauspost-cpuid-v2-043f7e40294aa8b6", "versionInfo": "v2.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:klauspost:cpuid\\/v2:v2.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/klauspost/cpuid@v2.3.0#v2"}]}, {"name": "github.com/klauspost/pgzip", "SPDXID": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-ba8d2ab961878e02", "versionInfo": "v1.2.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:klauspost:pgzip:v1.2.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/klauspost/pgzip@v1.2.6"}]}, {"name": "github.com/klauspost/pgzip", "SPDXID": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-7d7a97212f5aa915", "versionInfo": "v1.2.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:klauspost:pgzip:v1.2.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/klauspost/pgzip@v1.2.6"}]}, {"name": "github.com/knqyf263/go-apk-version", "SPDXID": "SPDXRef-Package-go-module-github.com-knqyf263-go-apk-version-f73d7373428f6f31", "versionInfo": "v0.0.0-20200609155635-041fdbb8563f", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:knqyf263:go-apk-version:v0.0.0-20200609155635-041fdbb8563f:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:knqyf263:go_apk_version:v0.0.0-20200609155635-041fdbb8563f:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/knqyf263/go-apk-version@v0.0.0-20200609155635-041fdbb8563f"}]}, {"name": "github.com/knqyf263/go-apk-version", "SPDXID": "SPDXRef-Package-go-module-github.com-knqyf263-go-apk-version-127a7942cb885de4", "versionInfo": "v0.0.0-20200609155635-041fdbb8563f", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:knqyf263:go-apk-version:v0.0.0-20200609155635-041fdbb8563f:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:knqyf263:go_apk_version:v0.0.0-20200609155635-041fdbb8563f:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/knqyf263/go-apk-version@v0.0.0-20200609155635-041fdbb8563f"}]}, {"name": "github.com/knqyf263/go-deb-version", "SPDXID": "SPDXRef-Package-go-module-github.com-knqyf263-go-deb-version-f434ce9f547600a6", "versionInfo": "v0.0.0-20241115132648-6f4aee6ccd23", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:knqyf263:go-deb-version:v0.0.0-20241115132648-6f4aee6ccd23:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:knqyf263:go_deb_version:v0.0.0-20241115132648-6f4aee6ccd23:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/knqyf263/go-deb-version@v0.0.0-20241115132648-6f4aee6ccd23"}]}, {"name": "github.com/knqyf263/go-deb-version", "SPDXID": "SPDXRef-Package-go-module-github.com-knqyf263-go-deb-version-c0b14cb096a6df1f", "versionInfo": "v0.0.0-20241115132648-6f4aee6ccd23", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:knqyf263:go-deb-version:v0.0.0-20241115132648-6f4aee6ccd23:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:knqyf263:go_deb_version:v0.0.0-20241115132648-6f4aee6ccd23:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/knqyf263/go-deb-version@v0.0.0-20241115132648-6f4aee6ccd23"}]}, {"name": "github.com/kr/pretty", "SPDXID": "SPDXRef-Package-go-module-github.com-kr-pretty-b76d4050a948c5b8", "versionInfo": "v0.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:kr:pretty:v0.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/kr/pretty@v0.3.1"}]}, {"name": "github.com/kr/pretty", "SPDXID": "SPDXRef-Package-go-module-github.com-kr-pretty-596dbedcdbaa87e3", "versionInfo": "v0.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:kr:pretty:v0.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/kr/pretty@v0.3.1"}]}, {"name": "github.com/kr/text", "SPDXID": "SPDXRef-Package-go-module-github.com-kr-text-149bb08a88b6158e", "versionInfo": "v0.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:kr:text:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/kr/text@v0.2.0"}]}, {"name": "github.com/kr/text", "SPDXID": "SPDXRef-Package-go-module-github.com-kr-text-959f0623ba8434ee", "versionInfo": "v0.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:kr:text:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/kr/text@v0.2.0"}]}, {"name": "github.com/lucasb-eyer/go-colorful", "SPDXID": "SPDXRef-Package-go-module-github.com-lucasb-eyer-go-colorful-d229ca92394c07d7", "versionInfo": "v1.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb-eyer:go-colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb-eyer:go_colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb_eyer:go-colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb_eyer:go_colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb:go-colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb:go_colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/lucasb-eyer/go-colorful@v1.3.0"}]}, {"name": "github.com/lucasb-eyer/go-colorful", "SPDXID": "SPDXRef-Package-go-module-github.com-lucasb-eyer-go-colorful-b90a07410a5270a8", "versionInfo": "v1.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb-eyer:go-colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb-eyer:go_colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb_eyer:go-colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb_eyer:go_colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb:go-colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb:go_colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/lucasb-eyer/go-colorful@v1.3.0"}]}, {"name": "github.com/maruel/natural", "SPDXID": "SPDXRef-Package-go-module-github.com-maruel-natural-b46de64980aad7a8", "versionInfo": "v1.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:maruel:natural:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/maruel/natural@v1.3.0"}]}, {"name": "github.com/maruel/natural", "SPDXID": "SPDXRef-Package-go-module-github.com-maruel-natural-aad9659cddb5d972", "versionInfo": "v1.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:maruel:natural:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/maruel/natural@v1.3.0"}]}, {"name": "github.com/masahiro331/go-mvn-version", "SPDXID": "SPDXRef-Package-go-module-github.com-masahiro331-go-mvn-version-f03a403f7bd55267", "versionInfo": "v0.0.0-20250131095131-f4974fa13b8a", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:masahiro331:go-mvn-version:v0.0.0-20250131095131-f4974fa13b8a:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:masahiro331:go_mvn_version:v0.0.0-20250131095131-f4974fa13b8a:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/masahiro331/go-mvn-version@v0.0.0-20250131095131-f4974fa13b8a"}]}, {"name": "github.com/masahiro331/go-mvn-version", "SPDXID": "SPDXRef-Package-go-module-github.com-masahiro331-go-mvn-version-9b9ca54608bc3cdc", "versionInfo": "v0.0.0-20250131095131-f4974fa13b8a", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:masahiro331:go-mvn-version:v0.0.0-20250131095131-f4974fa13b8a:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:masahiro331:go_mvn_version:v0.0.0-20250131095131-f4974fa13b8a:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/masahiro331/go-mvn-version@v0.0.0-20250131095131-f4974fa13b8a"}]}, {"name": "github.com/mattn/go-colorable", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-08b5338f302cc464", "versionInfo": "v0.1.14", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-colorable:v0.1.14:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_colorable:v0.1.14:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-colorable@v0.1.14"}]}, {"name": "github.com/mattn/go-colorable", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-33ac523ce1a65b88", "versionInfo": "v0.1.14", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-colorable:v0.1.14:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_colorable:v0.1.14:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-colorable@v0.1.14"}]}, {"name": "github.com/mattn/go-isatty", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-993ea55f7ccdb0d0", "versionInfo": "v0.0.24", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-isatty:v0.0.24:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_isatty:v0.0.24:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-isatty@v0.0.24"}]}, {"name": "github.com/mattn/go-isatty", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-7b531bd2b39d3f62", "versionInfo": "v0.0.24", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-isatty:v0.0.24:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_isatty:v0.0.24:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-isatty@v0.0.24"}]}, {"name": "github.com/mattn/go-localereader", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-localereader-352c97afb005b940", "versionInfo": "v0.0.2-0.20220822084749-2491eb6c1c75", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-localereader:v0.0.2-0.20220822084749-2491eb6c1c75:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_localereader:v0.0.2-0.20220822084749-2491eb6c1c75:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-localereader@v0.0.2-0.20220822084749-2491eb6c1c75"}]}, {"name": "github.com/mattn/go-localereader", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-localereader-7665900dafdbc80e", "versionInfo": "v0.0.2-0.20220822084749-2491eb6c1c75", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-localereader:v0.0.2-0.20220822084749-2491eb6c1c75:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_localereader:v0.0.2-0.20220822084749-2491eb6c1c75:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-localereader@v0.0.2-0.20220822084749-2491eb6c1c75"}]}, {"name": "github.com/mattn/go-runewidth", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-6480d35d13b6feaa", "versionInfo": "v0.0.21", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-runewidth:v0.0.21:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_runewidth:v0.0.21:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-runewidth@v0.0.21"}]}, {"name": "github.com/mattn/go-runewidth", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-97388b36b6b457a6", "versionInfo": "v0.0.21", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-runewidth:v0.0.21:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_runewidth:v0.0.21:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-runewidth@v0.0.21"}]}, {"name": "github.com/mgutz/ansi", "SPDXID": "SPDXRef-Package-go-module-github.com-mgutz-ansi-588bd007cbd0bf70", "versionInfo": "v0.0.0-20200706080929-d51e80ef957d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mgutz:ansi:v0.0.0-20200706080929-d51e80ef957d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mgutz/ansi@v0.0.0-20200706080929-d51e80ef957d"}]}, {"name": "github.com/mgutz/ansi", "SPDXID": "SPDXRef-Package-go-module-github.com-mgutz-ansi-cf6d167250b83896", "versionInfo": "v0.0.0-20200706080929-d51e80ef957d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mgutz:ansi:v0.0.0-20200706080929-d51e80ef957d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mgutz/ansi@v0.0.0-20200706080929-d51e80ef957d"}]}, {"name": "github.com/mholt/archives", "SPDXID": "SPDXRef-Package-go-module-github.com-mholt-archives-11281137f401ad9f", "versionInfo": "v0.1.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mholt:archives:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mholt/archives@v0.1.5"}]}, {"name": "github.com/mholt/archives", "SPDXID": "SPDXRef-Package-go-module-github.com-mholt-archives-2b5d4e7f53cfa1d0", "versionInfo": "v0.1.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mholt:archives:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mholt/archives@v0.1.5"}]}, {"name": "github.com/mikelolasagasti/xz", "SPDXID": "SPDXRef-Package-go-module-github.com-mikelolasagasti-xz-c913b3f0fe644db3", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mikelolasagasti:xz:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mikelolasagasti/xz@v1.0.1"}]}, {"name": "github.com/mikelolasagasti/xz", "SPDXID": "SPDXRef-Package-go-module-github.com-mikelolasagasti-xz-a46d24aed8403d91", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mikelolasagasti:xz:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mikelolasagasti/xz@v1.0.1"}]}, {"name": "github.com/minio/minlz", "SPDXID": "SPDXRef-Package-go-module-github.com-minio-minlz-e8b454dfa14f9606", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:minio:minlz:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/minio/minlz@v1.0.1"}]}, {"name": "github.com/minio/minlz", "SPDXID": "SPDXRef-Package-go-module-github.com-minio-minlz-47690e386e77bbf3", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:minio:minlz:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/minio/minlz@v1.0.1"}]}, {"name": "github.com/mitchellh/copystructure", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-a08603254284a9b5", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:copystructure:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/copystructure@v1.2.0"}]}, {"name": "github.com/mitchellh/copystructure", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-8353c61fc244d2bb", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:copystructure:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/copystructure@v1.2.0"}]}, {"name": "github.com/mitchellh/go-homedir", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-go-homedir-0eaeac14455768a2", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:go-homedir:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:go_homedir:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0"}]}, {"name": "github.com/mitchellh/go-homedir", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-go-homedir-ec0cc2636553efe9", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:go-homedir:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:go_homedir:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0"}]}, {"name": "github.com/mitchellh/go-wordwrap", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-e395ab6147e93076", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:go-wordwrap:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:go_wordwrap:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1"}]}, {"name": "github.com/mitchellh/go-wordwrap", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-d9a0d5e4a761c6e0", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:go-wordwrap:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:go_wordwrap:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1"}]}, {"name": "github.com/mitchellh/reflectwalk", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-683fad220f58d434", "versionInfo": "v1.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:reflectwalk:v1.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/reflectwalk@v1.0.2"}]}, {"name": "github.com/mitchellh/reflectwalk", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-3ec7a7d1906b7db3", "versionInfo": "v1.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:reflectwalk:v1.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/reflectwalk@v1.0.2"}]}, {"name": "github.com/moby/docker-image-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-96770404d2af75ce", "versionInfo": "v1.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:docker-image-spec:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:docker_image_spec:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/docker-image-spec@v1.3.1"}]}, {"name": "github.com/moby/docker-image-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-4798824adf3f0c97", "versionInfo": "v1.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:docker-image-spec:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:docker_image_spec:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/docker-image-spec@v1.3.1"}]}, {"name": "github.com/moby/locker", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-locker-2be6f96afd760c9f", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:locker:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/locker@v1.0.1"}]}, {"name": "github.com/moby/locker", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-locker-ceeed92adeb41d79", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:locker:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/locker@v1.0.1"}]}, {"name": "github.com/moby/moby/api", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-moby-api-a011d526f6a3613d", "versionInfo": "v1.56.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:moby\\/api:v1.56.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/moby@v1.56.0#api"}]}, {"name": "github.com/moby/moby/api", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-moby-api-80bb97ee6691e197", "versionInfo": "v1.56.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:moby\\/api:v1.56.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/moby@v1.56.0#api"}]}, {"name": "github.com/moby/moby/client", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-moby-client-510c5701256fab0b", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:moby\\/client:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/moby@v0.6.0#client"}]}, {"name": "github.com/moby/moby/client", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-moby-client-2baa2d7707160775", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:moby\\/client:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/moby@v0.6.0#client"}]}, {"name": "github.com/moby/sys/atomicwriter", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-atomicwriter-23ea3fc711b67e87", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/atomicwriter:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.1.0#atomicwriter"}]}, {"name": "github.com/moby/sys/atomicwriter", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-atomicwriter-942b88e617406db1", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/atomicwriter:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.1.0#atomicwriter"}]}, {"name": "github.com/moby/sys/mountinfo", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-24f259b1002c0db3", "versionInfo": "v0.7.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/mountinfo:v0.7.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.7.2#mountinfo"}]}, {"name": "github.com/moby/sys/mountinfo", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-96ef1b4764997197", "versionInfo": "v0.7.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/mountinfo:v0.7.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.7.2#mountinfo"}]}, {"name": "github.com/moby/sys/sequential", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-5ffdba78d077a51b", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/sequential:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.6.0#sequential"}]}, {"name": "github.com/moby/sys/sequential", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-3263f4ee7d0bc62c", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/sequential:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.6.0#sequential"}]}, {"name": "github.com/moby/sys/signal", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-signal-7fbf81d1a66cbfbf", "versionInfo": "v0.7.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/signal:v0.7.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.7.1#signal"}]}, {"name": "github.com/moby/sys/signal", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-signal-161aba58f6e8834e", "versionInfo": "v0.7.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/signal:v0.7.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.7.1#signal"}]}, {"name": "github.com/moby/sys/user", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-user-f7aafa6bbeddca98", "versionInfo": "v0.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/user:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.4.0#user"}]}, {"name": "github.com/moby/sys/user", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-user-0ec66a10cefc2803", "versionInfo": "v0.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/user:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.4.0#user"}]}, {"name": "github.com/moby/sys/userns", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-userns-322f946a739c44e9", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/userns:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.1.0#userns"}]}, {"name": "github.com/moby/sys/userns", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-userns-98a13d1d25bd81ba", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/userns:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.1.0#userns"}]}, {"name": "github.com/modern-go/concurrent", "SPDXID": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-a36fc4a176d0ee4a", "versionInfo": "v0.0.0-20180306012644-bacd9c7ef1dd", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern-go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern_go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd"}]}, {"name": "github.com/modern-go/concurrent", "SPDXID": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-4ef0b3e8a43b68e2", "versionInfo": "v0.0.0-20180306012644-bacd9c7ef1dd", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern-go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern_go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd"}]}, {"name": "github.com/modern-go/reflect2", "SPDXID": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-b199fcf302d10783", "versionInfo": "v1.0.3-0.20250322232337-35a7c28c31ee", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern-go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern_go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee"}]}, {"name": "github.com/modern-go/reflect2", "SPDXID": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-0c3d1d32aef4cc22", "versionInfo": "v1.0.3-0.20250322232337-35a7c28c31ee", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern-go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern_go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee"}]}, {"name": "github.com/morikuni/aec", "SPDXID": "SPDXRef-Package-go-module-github.com-morikuni-aec-fb1bc5562878f05a", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:morikuni:aec:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/morikuni/aec@v1.1.0"}]}, {"name": "github.com/morikuni/aec", "SPDXID": "SPDXRef-Package-go-module-github.com-morikuni-aec-4205bb49ac3a7a4c", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:morikuni:aec:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/morikuni/aec@v1.1.0"}]}, {"name": "github.com/muesli/ansi", "SPDXID": "SPDXRef-Package-go-module-github.com-muesli-ansi-bf26c8fc89989d9d", "versionInfo": "v0.0.0-20230316100256-276c6243b2f6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:muesli:ansi:v0.0.0-20230316100256-276c6243b2f6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/muesli/ansi@v0.0.0-20230316100256-276c6243b2f6"}]}, {"name": "github.com/muesli/ansi", "SPDXID": "SPDXRef-Package-go-module-github.com-muesli-ansi-a0cb089e18185ff6", "versionInfo": "v0.0.0-20230316100256-276c6243b2f6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:muesli:ansi:v0.0.0-20230316100256-276c6243b2f6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/muesli/ansi@v0.0.0-20230316100256-276c6243b2f6"}]}, {"name": "github.com/muesli/cancelreader", "SPDXID": "SPDXRef-Package-go-module-github.com-muesli-cancelreader-952b970833d2dae7", "versionInfo": "v0.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:muesli:cancelreader:v0.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/muesli/cancelreader@v0.2.2"}]}, {"name": "github.com/muesli/cancelreader", "SPDXID": "SPDXRef-Package-go-module-github.com-muesli-cancelreader-ed17cffa2ebc0d15", "versionInfo": "v0.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:muesli:cancelreader:v0.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/muesli/cancelreader@v0.2.2"}]}, {"name": "github.com/muesli/termenv", "SPDXID": "SPDXRef-Package-go-module-github.com-muesli-termenv-eda57fee892a5a88", "versionInfo": "v0.16.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:muesli:termenv:v0.16.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/muesli/termenv@v0.16.0"}]}, {"name": "github.com/muesli/termenv", "SPDXID": "SPDXRef-Package-go-module-github.com-muesli-termenv-ad3bdda0acac034d", "versionInfo": "v0.16.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:muesli:termenv:v0.16.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/muesli/termenv@v0.16.0"}]}, {"name": "github.com/ncruces/go-strftime", "SPDXID": "SPDXRef-Package-go-module-github.com-ncruces-go-strftime-1144b4da6fcfdc60", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ncruces:go-strftime:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ncruces:go_strftime:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/ncruces/go-strftime@v1.0.0"}]}, {"name": "github.com/ncruces/go-strftime", "SPDXID": "SPDXRef-Package-go-module-github.com-ncruces-go-strftime-8dded9db9bf04e66", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ncruces:go-strftime:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ncruces:go_strftime:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/ncruces/go-strftime@v1.0.0"}]}, {"name": "github.com/nix-community/go-nix", "SPDXID": "SPDXRef-Package-go-module-github.com-nix-community-go-nix-f72ee684f3cac869", "versionInfo": "v0.0.0-20250101154619-4bdde671e0a1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix-community:go-nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix-community:go_nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix_community:go-nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix_community:go_nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix:go-nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix:go_nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/nix-community/go-nix@v0.0.0-20250101154619-4bdde671e0a1"}]}, {"name": "github.com/nix-community/go-nix", "SPDXID": "SPDXRef-Package-go-module-github.com-nix-community-go-nix-4a26384751caf982", "versionInfo": "v0.0.0-20250101154619-4bdde671e0a1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix-community:go-nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix-community:go_nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix_community:go-nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix_community:go_nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix:go-nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix:go_nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/nix-community/go-nix@v0.0.0-20250101154619-4bdde671e0a1"}]}, {"name": "github.com/nwaples/rardecode/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-nwaples-rardecode-v2-61ed5aa217767dd4", "versionInfo": "v2.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nwaples:rardecode\\/v2:v2.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/nwaples/rardecode@v2.2.0#v2"}]}, {"name": "github.com/nwaples/rardecode/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-nwaples-rardecode-v2-38844de138a359c6", "versionInfo": "v2.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nwaples:rardecode\\/v2:v2.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/nwaples/rardecode@v2.2.0#v2"}]}, {"name": "github.com/olekukonko/cat", "SPDXID": "SPDXRef-Package-go-module-github.com-olekukonko-cat-bebcd8c7e0abbf91", "versionInfo": "v0.0.0-20250911104152-50322a0618f6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:olekukonko:cat:v0.0.0-20250911104152-50322a0618f6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/olekukonko/cat@v0.0.0-20250911104152-50322a0618f6"}]}, {"name": "github.com/olekukonko/cat", "SPDXID": "SPDXRef-Package-go-module-github.com-olekukonko-cat-4d94768862b88c20", "versionInfo": "v0.0.0-20250911104152-50322a0618f6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:olekukonko:cat:v0.0.0-20250911104152-50322a0618f6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/olekukonko/cat@v0.0.0-20250911104152-50322a0618f6"}]}, {"name": "github.com/olekukonko/errors", "SPDXID": "SPDXRef-Package-go-module-github.com-olekukonko-errors-b37731489e65ea4f", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:olekukonko:errors:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/olekukonko/errors@v1.2.0"}]}, {"name": "github.com/olekukonko/errors", "SPDXID": "SPDXRef-Package-go-module-github.com-olekukonko-errors-bf4c93150e139994", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:olekukonko:errors:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/olekukonko/errors@v1.2.0"}]}, {"name": "github.com/olekukonko/ll", "SPDXID": "SPDXRef-Package-go-module-github.com-olekukonko-ll-9eebc3ddf477ca22", "versionInfo": "v0.1.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:olekukonko:ll:v0.1.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/olekukonko/ll@v0.1.6"}]}, {"name": "github.com/olekukonko/ll", "SPDXID": "SPDXRef-Package-go-module-github.com-olekukonko-ll-4262d68bf7255e4d", "versionInfo": "v0.1.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:olekukonko:ll:v0.1.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/olekukonko/ll@v0.1.6"}]}, {"name": "github.com/olekukonko/tablewriter", "SPDXID": "SPDXRef-Package-go-module-github.com-olekukonko-tablewriter-347c44c904ba4a4c", "versionInfo": "v1.1.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:olekukonko:tablewriter:v1.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/olekukonko/tablewriter@v1.1.4"}]}, {"name": "github.com/olekukonko/tablewriter", "SPDXID": "SPDXRef-Package-go-module-github.com-olekukonko-tablewriter-e97fed8e76826d40", "versionInfo": "v1.1.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:olekukonko:tablewriter:v1.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/olekukonko/tablewriter@v1.1.4"}]}, {"name": "github.com/opencontainers/go-digest", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-19989b5d142f3073", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:go-digest:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:go_digest:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0"}]}, {"name": "github.com/opencontainers/go-digest", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-04bc2386a5aa4c80", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:go-digest:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:go_digest:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0"}]}, {"name": "github.com/opencontainers/image-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-10613df95c6a2b3e", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:image-spec:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:image_spec:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1"}]}, {"name": "github.com/opencontainers/image-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-305848e01f1fb7d4", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:image-spec:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:image_spec:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1"}]}, {"name": "github.com/opencontainers/runtime-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-f19e239bf624ade5", "versionInfo": "v1.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime-spec:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime_spec:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/runtime-spec@v1.3.0"}]}, {"name": "github.com/opencontainers/runtime-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-7f7618e5b9c335d1", "versionInfo": "v1.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime-spec:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime_spec:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/runtime-spec@v1.3.0"}]}, {"name": "github.com/openvex/go-vex", "SPDXID": "SPDXRef-Package-go-module-github.com-openvex-go-vex-e70fd5510c27983b", "versionInfo": "v0.2.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:openvex:go-vex:v0.2.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:openvex:go_vex:v0.2.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/openvex/go-vex@v0.2.8"}]}, {"name": "github.com/openvex/go-vex", "SPDXID": "SPDXRef-Package-go-module-github.com-openvex-go-vex-376bf4281f4f03cf", "versionInfo": "v0.2.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:openvex:go-vex:v0.2.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:openvex:go_vex:v0.2.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/openvex/go-vex@v0.2.8"}]}, {"name": "github.com/owenrumney/go-sarif", "SPDXID": "SPDXRef-Package-go-module-github.com-owenrumney-go-sarif-9dc42c14c6ffb775", "versionInfo": "v1.1.2-0.20231003122901-1000f5e05554", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:owenrumney:go-sarif:v1.1.2-0.20231003122901-1000f5e05554:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:owenrumney:go_sarif:v1.1.2-0.20231003122901-1000f5e05554:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/owenrumney/go-sarif@v1.1.2-0.20231003122901-1000f5e05554"}]}, {"name": "github.com/owenrumney/go-sarif", "SPDXID": "SPDXRef-Package-go-module-github.com-owenrumney-go-sarif-1c9dfdacb0894035", "versionInfo": "v1.1.2-0.20231003122901-1000f5e05554", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:owenrumney:go-sarif:v1.1.2-0.20231003122901-1000f5e05554:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:owenrumney:go_sarif:v1.1.2-0.20231003122901-1000f5e05554:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/owenrumney/go-sarif@v1.1.2-0.20231003122901-1000f5e05554"}]}, {"name": "github.com/package-url/packageurl-go", "SPDXID": "SPDXRef-Package-go-module-github.com-package-url-packageurl-go-90da91c7744b3bd4", "versionInfo": "v0.1.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:package-url:packageurl-go:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:package-url:packageurl_go:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:package_url:packageurl-go:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:package_url:packageurl_go:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:package:packageurl-go:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:package:packageurl_go:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/package-url/packageurl-go@v0.1.5"}]}, {"name": "github.com/package-url/packageurl-go", "SPDXID": "SPDXRef-Package-go-module-github.com-package-url-packageurl-go-bc4e0ee26b6000bf", "versionInfo": "v0.1.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:package-url:packageurl-go:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:package-url:packageurl_go:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:package_url:packageurl-go:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:package_url:packageurl_go:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:package:packageurl-go:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:package:packageurl_go:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/package-url/packageurl-go@v0.1.5"}]}, {"name": "github.com/pandatix/go-cvss", "SPDXID": "SPDXRef-Package-go-module-github.com-pandatix-go-cvss-f0e242900b28999e", "versionInfo": "v0.6.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pandatix:go-cvss:v0.6.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pandatix:go_cvss:v0.6.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pandatix/go-cvss@v0.6.4"}]}, {"name": "github.com/pandatix/go-cvss", "SPDXID": "SPDXRef-Package-go-module-github.com-pandatix-go-cvss-036506eb5c70fd8b", "versionInfo": "v0.6.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pandatix:go-cvss:v0.6.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pandatix:go_cvss:v0.6.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pandatix/go-cvss@v0.6.4"}]}, {"name": "github.com/pb33f/ordered-map/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-pb33f-ordered-map-v2-a5d4470f38247c26", "versionInfo": "v2.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pb33f:ordered-map\\/v2:v2.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pb33f:ordered_map\\/v2:v2.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pb33f/ordered-map@v2.3.1#v2"}]}, {"name": "github.com/pb33f/ordered-map/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-pb33f-ordered-map-v2-373484fc5c20815e", "versionInfo": "v2.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pb33f:ordered-map\\/v2:v2.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pb33f:ordered_map\\/v2:v2.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pb33f/ordered-map@v2.3.1#v2"}]}, {"name": "github.com/pborman/indent", "SPDXID": "SPDXRef-Package-go-module-github.com-pborman-indent-bd70889000a4b095", "versionInfo": "v1.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pborman:indent:v1.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pborman/indent@v1.2.1"}]}, {"name": "github.com/pborman/indent", "SPDXID": "SPDXRef-Package-go-module-github.com-pborman-indent-524c97205bf0dd4a", "versionInfo": "v1.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pborman:indent:v1.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pborman/indent@v1.2.1"}]}, {"name": "github.com/pelletier/go-toml", "SPDXID": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-f1f26610dff6c5b1", "versionInfo": "v1.9.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pelletier:go-toml:v1.9.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pelletier:go_toml:v1.9.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pelletier/go-toml@v1.9.5"}]}, {"name": "github.com/pelletier/go-toml", "SPDXID": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-d0186ce91c94c19b", "versionInfo": "v1.9.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pelletier:go-toml:v1.9.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pelletier:go_toml:v1.9.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pelletier/go-toml@v1.9.5"}]}, {"name": "github.com/pelletier/go-toml/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-d91b6d6201c35c75", "versionInfo": "v2.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pelletier:go-toml\\/v2:v2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pelletier:go_toml\\/v2:v2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pelletier/go-toml@v2.4.3#v2"}]}, {"name": "github.com/pelletier/go-toml/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-32e021a358ae7940", "versionInfo": "v2.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pelletier:go-toml\\/v2:v2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pelletier:go_toml\\/v2:v2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pelletier/go-toml@v2.4.3#v2"}]}, {"name": "github.com/pierrec/lz4/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-5ad1218512f08dac", "versionInfo": "v4.1.26", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pierrec:lz4\\/v4:v4.1.26:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pierrec/lz4@v4.1.26#v4"}]}, {"name": "github.com/pierrec/lz4/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-f3352de1ba7ae8d0", "versionInfo": "v4.1.26", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pierrec:lz4\\/v4:v4.1.26:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pierrec/lz4@v4.1.26#v4"}]}, {"name": "github.com/piprate/json-gold", "SPDXID": "SPDXRef-Package-go-module-github.com-piprate-json-gold-10cef35a20554e69", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:piprate:json-gold:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:piprate:json_gold:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/piprate/json-gold@v0.7.0"}]}, {"name": "github.com/piprate/json-gold", "SPDXID": "SPDXRef-Package-go-module-github.com-piprate-json-gold-33a0c1b072b89937", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:piprate:json-gold:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:piprate:json_gold:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/piprate/json-gold@v0.7.0"}]}, {"name": "github.com/pjbgf/sha1cd", "SPDXID": "SPDXRef-Package-go-module-github.com-pjbgf-sha1cd-9e41dfa71d0745e8", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pjbgf:sha1cd:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pjbgf/sha1cd@v0.6.0"}]}, {"name": "github.com/pjbgf/sha1cd", "SPDXID": "SPDXRef-Package-go-module-github.com-pjbgf-sha1cd-979f54ed2119ffe6", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pjbgf:sha1cd:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pjbgf/sha1cd@v0.6.0"}]}, {"name": "github.com/pkg/errors", "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-errors-2f2b4a7ce7872628", "versionInfo": "v0.9.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pkg/errors@v0.9.1"}]}, {"name": "github.com/pkg/errors", "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-errors-1c0b2d9b80d28584", "versionInfo": "v0.9.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pkg/errors@v0.9.1"}]}, {"name": "github.com/pkg/profile", "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-profile-ba1a14fd8b7b2f72", "versionInfo": "v1.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pkg:profile:v1.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pkg/profile@v1.7.0"}]}, {"name": "github.com/pkg/profile", "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-profile-408e2170d5c0aa6d", "versionInfo": "v1.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pkg:profile:v1.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pkg/profile@v1.7.0"}]}, {"name": "github.com/pkg/xattr", "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-xattr-6223a1a56b452ce1", "versionInfo": "v0.4.12", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pkg:xattr:v0.4.12:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pkg/xattr@v0.4.12"}]}, {"name": "github.com/pkg/xattr", "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-xattr-89a3cbecc17d0e75", "versionInfo": "v0.4.12", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pkg:xattr:v0.4.12:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pkg/xattr@v0.4.12"}]}, {"name": "github.com/planetscale/vtprotobuf", "SPDXID": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-63efd6ebb5d1e9e9", "versionInfo": "v0.6.1-0.20240319094008-0393e58bdf10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:planetscale:vtprotobuf:v0.6.1-0.20240319094008-0393e58bdf10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10"}]}, {"name": "github.com/planetscale/vtprotobuf", "SPDXID": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-5c9326c6ce9315fe", "versionInfo": "v0.6.1-0.20240319094008-0393e58bdf10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:planetscale:vtprotobuf:v0.6.1-0.20240319094008-0393e58bdf10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10"}]}, {"name": "github.com/pquerna/cachecontrol", "SPDXID": "SPDXRef-Package-go-module-github.com-pquerna-cachecontrol-49504ad6cb36edba", "versionInfo": "v0.0.0-20180517163645-1555304b9b35", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pquerna:cachecontrol:v0.0.0-20180517163645-1555304b9b35:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pquerna/cachecontrol@v0.0.0-20180517163645-1555304b9b35"}]}, {"name": "github.com/pquerna/cachecontrol", "SPDXID": "SPDXRef-Package-go-module-github.com-pquerna-cachecontrol-7446895663010f14", "versionInfo": "v0.0.0-20180517163645-1555304b9b35", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pquerna:cachecontrol:v0.0.0-20180517163645-1555304b9b35:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pquerna/cachecontrol@v0.0.0-20180517163645-1555304b9b35"}]}, {"name": "github.com/remyoudompheng/bigfft", "SPDXID": "SPDXRef-Package-go-module-github.com-remyoudompheng-bigfft-82caff8370081f6f", "versionInfo": "v0.0.0-20230129092748-24d4a6f8daec", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:remyoudompheng:bigfft:v0.0.0-20230129092748-24d4a6f8daec:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/remyoudompheng/bigfft@v0.0.0-20230129092748-24d4a6f8daec"}]}, {"name": "github.com/remyoudompheng/bigfft", "SPDXID": "SPDXRef-Package-go-module-github.com-remyoudompheng-bigfft-b1ee59cbc8bb1a32", "versionInfo": "v0.0.0-20230129092748-24d4a6f8daec", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:remyoudompheng:bigfft:v0.0.0-20230129092748-24d4a6f8daec:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/remyoudompheng/bigfft@v0.0.0-20230129092748-24d4a6f8daec"}]}, {"name": "github.com/rivo/uniseg", "SPDXID": "SPDXRef-Package-go-module-github.com-rivo-uniseg-2c0de3c260aa0d91", "versionInfo": "v0.4.7", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rivo:uniseg:v0.4.7:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/rivo/uniseg@v0.4.7"}]}, {"name": "github.com/rivo/uniseg", "SPDXID": "SPDXRef-Package-go-module-github.com-rivo-uniseg-b8c0bf8d033d75ba", "versionInfo": "v0.4.7", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rivo:uniseg:v0.4.7:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/rivo/uniseg@v0.4.7"}]}, {"name": "github.com/rogpeppe/go-internal", "SPDXID": "SPDXRef-Package-go-module-github.com-rogpeppe-go-internal-a7723e2c1ea652b3", "versionInfo": "v1.14.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rogpeppe:go-internal:v1.14.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rogpeppe:go_internal:v1.14.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/rogpeppe/go-internal@v1.14.1"}]}, {"name": "github.com/rogpeppe/go-internal", "SPDXID": "SPDXRef-Package-go-module-github.com-rogpeppe-go-internal-e2dcf5ec58de86c5", "versionInfo": "v1.14.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rogpeppe:go-internal:v1.14.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rogpeppe:go_internal:v1.14.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/rogpeppe/go-internal@v1.14.1"}]}, {"name": "github.com/rust-secure-code/go-rustaudit", "SPDXID": "SPDXRef-Package-go-module-github.com-rust-secure-code-go-rustaudit-5e103b6f10fbeebc", "versionInfo": "v0.0.0-20250226111315-e20ec32e963c", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust-secure-code:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust-secure-code:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust_secure_code:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust_secure_code:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust-secure:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust-secure:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust_secure:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust_secure:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/rust-secure-code/go-rustaudit@v0.0.0-20250226111315-e20ec32e963c"}]}, {"name": "github.com/rust-secure-code/go-rustaudit", "SPDXID": "SPDXRef-Package-go-module-github.com-rust-secure-code-go-rustaudit-4c8c544e4828b6a0", "versionInfo": "v0.0.0-20250226111315-e20ec32e963c", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust-secure-code:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust-secure-code:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust_secure_code:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust_secure_code:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust-secure:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust-secure:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust_secure:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust_secure:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/rust-secure-code/go-rustaudit@v0.0.0-20250226111315-e20ec32e963c"}]}, {"name": "github.com/sagikazarmark/locafero", "SPDXID": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-ddd1e2da24a21af5", "versionInfo": "v0.11.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sagikazarmark:locafero:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sagikazarmark/locafero@v0.11.0"}]}, {"name": "github.com/sagikazarmark/locafero", "SPDXID": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-63ff3cc2eea97f28", "versionInfo": "v0.11.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sagikazarmark:locafero:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sagikazarmark/locafero@v0.11.0"}]}, {"name": "github.com/saintfish/chardet", "SPDXID": "SPDXRef-Package-go-module-github.com-saintfish-chardet-cf5ea227de9a83a7", "versionInfo": "v0.0.0-20230101081208-5e3ef4b5456d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:saintfish:chardet:v0.0.0-20230101081208-5e3ef4b5456d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/saintfish/chardet@v0.0.0-20230101081208-5e3ef4b5456d"}]}, {"name": "github.com/saintfish/chardet", "SPDXID": "SPDXRef-Package-go-module-github.com-saintfish-chardet-95e74062d1eb7935", "versionInfo": "v0.0.0-20230101081208-5e3ef4b5456d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:saintfish:chardet:v0.0.0-20230101081208-5e3ef4b5456d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/saintfish/chardet@v0.0.0-20230101081208-5e3ef4b5456d"}]}, {"name": "github.com/santhosh-tekuri/jsonschema/v6", "SPDXID": "SPDXRef-Package-go-module-github.com-santhosh-tekuri-jsonschema-v6-c20b008a43f442ea", "versionInfo": "v6.0.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:santhosh-tekuri:jsonschema\\/v6:v6.0.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:santhosh_tekuri:jsonschema\\/v6:v6.0.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:santhosh:jsonschema\\/v6:v6.0.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/santhosh-tekuri/jsonschema@v6.0.3#v6"}]}, {"name": "github.com/santhosh-tekuri/jsonschema/v6", "SPDXID": "SPDXRef-Package-go-module-github.com-santhosh-tekuri-jsonschema-v6-b26018fb0634b0f4", "versionInfo": "v6.0.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:santhosh-tekuri:jsonschema\\/v6:v6.0.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:santhosh_tekuri:jsonschema\\/v6:v6.0.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:santhosh:jsonschema\\/v6:v6.0.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/santhosh-tekuri/jsonschema@v6.0.3#v6"}]}, {"name": "github.com/sassoftware/go-rpmutils", "SPDXID": "SPDXRef-Package-go-module-github.com-sassoftware-go-rpmutils-cc1a1dbe4057c7de", "versionInfo": "v0.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sassoftware:go-rpmutils:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sassoftware:go_rpmutils:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sassoftware/go-rpmutils@v0.4.0"}]}, {"name": "github.com/sassoftware/go-rpmutils", "SPDXID": "SPDXRef-Package-go-module-github.com-sassoftware-go-rpmutils-0041fe15cccf8933", "versionInfo": "v0.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sassoftware:go-rpmutils:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sassoftware:go_rpmutils:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sassoftware/go-rpmutils@v0.4.0"}]}, {"name": "github.com/scylladb/go-set", "SPDXID": "SPDXRef-Package-go-module-github.com-scylladb-go-set-580d79f1c5557fa8", "versionInfo": "v1.0.3-0.20200225121959-cc7b2070d91e", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:scylladb:go-set:v1.0.3-0.20200225121959-cc7b2070d91e:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:scylladb:go_set:v1.0.3-0.20200225121959-cc7b2070d91e:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/scylladb/go-set@v1.0.3-0.20200225121959-cc7b2070d91e"}]}, {"name": "github.com/scylladb/go-set", "SPDXID": "SPDXRef-Package-go-module-github.com-scylladb-go-set-02080dbc1ccef012", "versionInfo": "v1.0.3-0.20200225121959-cc7b2070d91e", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:scylladb:go-set:v1.0.3-0.20200225121959-cc7b2070d91e:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:scylladb:go_set:v1.0.3-0.20200225121959-cc7b2070d91e:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/scylladb/go-set@v1.0.3-0.20200225121959-cc7b2070d91e"}]}, {"name": "github.com/sergi/go-diff", "SPDXID": "SPDXRef-Package-go-module-github.com-sergi-go-diff-eadb73b749fc4f5b", "versionInfo": "v1.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sergi:go-diff:v1.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sergi:go_diff:v1.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sergi/go-diff@v1.4.0"}]}, {"name": "github.com/sergi/go-diff", "SPDXID": "SPDXRef-Package-go-module-github.com-sergi-go-diff-0c00c18d8ae68f91", "versionInfo": "v1.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sergi:go-diff:v1.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sergi:go_diff:v1.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sergi/go-diff@v1.4.0"}]}, {"name": "github.com/shopspring/decimal", "SPDXID": "SPDXRef-Package-go-module-github.com-shopspring-decimal-19af8ea56a342c55", "versionInfo": "v1.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:shopspring:decimal:v1.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/shopspring/decimal@v1.4.0"}]}, {"name": "github.com/shopspring/decimal", "SPDXID": "SPDXRef-Package-go-module-github.com-shopspring-decimal-f42618a2365f1ee2", "versionInfo": "v1.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:shopspring:decimal:v1.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/shopspring/decimal@v1.4.0"}]}, {"name": "github.com/sirupsen/logrus", "SPDXID": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-f9cb0ed57e859e4c", "versionInfo": "v1.9.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sirupsen:logrus:v1.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sirupsen/logrus@v1.9.4"}]}, {"name": "github.com/sirupsen/logrus", "SPDXID": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-79be6d7b25fd4626", "versionInfo": "v1.9.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sirupsen:logrus:v1.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sirupsen/logrus@v1.9.4"}]}, {"name": "github.com/skeema/knownhosts", "SPDXID": "SPDXRef-Package-go-module-github.com-skeema-knownhosts-baf110c890c63110", "versionInfo": "v1.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:skeema:knownhosts:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/skeema/knownhosts@v1.3.1"}]}, {"name": "github.com/skeema/knownhosts", "SPDXID": "SPDXRef-Package-go-module-github.com-skeema-knownhosts-f81b956f509e840a", "versionInfo": "v1.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:skeema:knownhosts:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/skeema/knownhosts@v1.3.1"}]}, {"name": "github.com/smallnest/ringbuffer", "SPDXID": "SPDXRef-Package-go-module-github.com-smallnest-ringbuffer-f932a811bf394968", "versionInfo": "v0.0.0-20241116012123-461381446e3d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:smallnest:ringbuffer:v0.0.0-20241116012123-461381446e3d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/smallnest/ringbuffer@v0.0.0-20241116012123-461381446e3d"}]}, {"name": "github.com/smallnest/ringbuffer", "SPDXID": "SPDXRef-Package-go-module-github.com-smallnest-ringbuffer-511ce693d405a06f", "versionInfo": "v0.0.0-20241116012123-461381446e3d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:smallnest:ringbuffer:v0.0.0-20241116012123-461381446e3d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/smallnest/ringbuffer@v0.0.0-20241116012123-461381446e3d"}]}, {"name": "github.com/sorairolake/lzip-go", "SPDXID": "SPDXRef-Package-go-module-github.com-sorairolake-lzip-go-2a3dfa41f8cc9375", "versionInfo": "v0.3.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sorairolake:lzip-go:v0.3.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sorairolake:lzip_go:v0.3.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sorairolake/lzip-go@v0.3.8"}]}, {"name": "github.com/sorairolake/lzip-go", "SPDXID": "SPDXRef-Package-go-module-github.com-sorairolake-lzip-go-a97581a03c6becaf", "versionInfo": "v0.3.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sorairolake:lzip-go:v0.3.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sorairolake:lzip_go:v0.3.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sorairolake/lzip-go@v0.3.8"}]}, {"name": "github.com/sourcegraph/conc", "SPDXID": "SPDXRef-Package-go-module-github.com-sourcegraph-conc-cfbd747de78458fc", "versionInfo": "v0.3.1-0.20240121214520-5f936abd7ae8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sourcegraph:conc:v0.3.1-0.20240121214520-5f936abd7ae8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sourcegraph/conc@v0.3.1-0.20240121214520-5f936abd7ae8"}]}, {"name": "github.com/sourcegraph/conc", "SPDXID": "SPDXRef-Package-go-module-github.com-sourcegraph-conc-4019ec68de2ee981", "versionInfo": "v0.3.1-0.20240121214520-5f936abd7ae8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sourcegraph:conc:v0.3.1-0.20240121214520-5f936abd7ae8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sourcegraph/conc@v0.3.1-0.20240121214520-5f936abd7ae8"}]}, {"name": "github.com/spdx/gordf", "SPDXID": "SPDXRef-Package-go-module-github.com-spdx-gordf-77b6a97fae96f2c5", "versionInfo": "v0.0.0-20250128162952-000978ccd6fb", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spdx:gordf:v0.0.0-20250128162952-000978ccd6fb:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spdx/gordf@v0.0.0-20250128162952-000978ccd6fb"}]}, {"name": "github.com/spdx/gordf", "SPDXID": "SPDXRef-Package-go-module-github.com-spdx-gordf-fa860ad9fec9e692", "versionInfo": "v0.0.0-20250128162952-000978ccd6fb", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spdx:gordf:v0.0.0-20250128162952-000978ccd6fb:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spdx/gordf@v0.0.0-20250128162952-000978ccd6fb"}]}, {"name": "github.com/spdx/tools-golang", "SPDXID": "SPDXRef-Package-go-module-github.com-spdx-tools-golang-33492ce84f5deee3", "versionInfo": "v0.6.0-rc4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spdx:tools-golang:v0.6.0-rc4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spdx:tools_golang:v0.6.0-rc4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spdx/tools-golang@v0.6.0-rc4"}]}, {"name": "github.com/spdx/tools-golang", "SPDXID": "SPDXRef-Package-go-module-github.com-spdx-tools-golang-6333ded3cfe1ec0d", "versionInfo": "v0.6.0-rc4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spdx:tools-golang:v0.6.0-rc4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spdx:tools_golang:v0.6.0-rc4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spdx/tools-golang@v0.6.0-rc4"}]}, {"name": "github.com/spf13/afero", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-afero-577ab40ea4ceaedf", "versionInfo": "v1.15.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:afero:v1.15.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/afero@v1.15.0"}]}, {"name": "github.com/spf13/afero", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-afero-48b5ac7707000756", "versionInfo": "v1.15.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:afero:v1.15.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/afero@v1.15.0"}]}, {"name": "github.com/spf13/cast", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-cast-b759ce340b0f2e0e", "versionInfo": "v1.10.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:cast:v1.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/cast@v1.10.0"}]}, {"name": "github.com/spf13/cast", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-cast-0c8e9ee8e493ef91", "versionInfo": "v1.10.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:cast:v1.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/cast@v1.10.0"}]}, {"name": "github.com/spf13/cobra", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-cobra-aaf4307e8bf5eb4c", "versionInfo": "v1.10.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:cobra:v1.10.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/cobra@v1.10.2"}]}, {"name": "github.com/spf13/cobra", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-cobra-15cfaf534d13d551", "versionInfo": "v1.10.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:cobra:v1.10.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/cobra@v1.10.2"}]}, {"name": "github.com/spf13/pflag", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-pflag-ec9ed93888749dc0", "versionInfo": "v1.0.10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:pflag:v1.0.10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/pflag@v1.0.10"}]}, {"name": "github.com/spf13/pflag", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-pflag-b7d4f247b89d48d9", "versionInfo": "v1.0.10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:pflag:v1.0.10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/pflag@v1.0.10"}]}, {"name": "github.com/spf13/viper", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-viper-53bb8bba12e970aa", "versionInfo": "v1.21.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:viper:v1.21.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/viper@v1.21.0"}]}, {"name": "github.com/spf13/viper", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-viper-dc1a2c757928829f", "versionInfo": "v1.21.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:viper:v1.21.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/viper@v1.21.0"}]}, {"name": "github.com/spiffe/go-spiffe/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-spiffe-go-spiffe-v2-19c7011cfc5a1b62", "versionInfo": "v2.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spiffe:go-spiffe\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spiffe:go_spiffe\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spiffe/go-spiffe@v2.7.0#v2"}]}, {"name": "github.com/spiffe/go-spiffe/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-spiffe-go-spiffe-v2-aae517762df2df52", "versionInfo": "v2.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spiffe:go-spiffe\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spiffe:go_spiffe\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spiffe/go-spiffe@v2.7.0#v2"}]}, {"name": "github.com/stretchr/objx", "SPDXID": "SPDXRef-Package-go-module-github.com-stretchr-objx-1466a8a1e6db071b", "versionInfo": "v0.5.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:stretchr:objx:v0.5.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/stretchr/objx@v0.5.3"}]}, {"name": "github.com/stretchr/objx", "SPDXID": "SPDXRef-Package-go-module-github.com-stretchr-objx-105c5fecde627a25", "versionInfo": "v0.5.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:stretchr:objx:v0.5.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/stretchr/objx@v0.5.3"}]}, {"name": "github.com/stretchr/testify", "SPDXID": "SPDXRef-Package-go-module-github.com-stretchr-testify-d64a25dace8d069c", "versionInfo": "v1.12.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:stretchr:testify:v1.12.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/stretchr/testify@v1.12.1"}]}, {"name": "github.com/stretchr/testify", "SPDXID": "SPDXRef-Package-go-module-github.com-stretchr-testify-8a8e274d66d54652", "versionInfo": "v1.12.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:stretchr:testify:v1.12.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/stretchr/testify@v1.12.1"}]}, {"name": "github.com/subosito/gotenv", "SPDXID": "SPDXRef-Package-go-module-github.com-subosito-gotenv-2db166198c302bc1", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:subosito:gotenv:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/subosito/gotenv@v1.6.0"}]}, {"name": "github.com/subosito/gotenv", "SPDXID": "SPDXRef-Package-go-module-github.com-subosito-gotenv-2ad2d37143330616", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:subosito:gotenv:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/subosito/gotenv@v1.6.0"}]}, {"name": "github.com/sylabs/sif/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-70fa100f612ace84", "versionInfo": "v2.24.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sylabs:sif\\/v2:v2.24.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sylabs/sif@v2.24.1#v2"}]}, {"name": "github.com/sylabs/sif/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-f1d75774f395139a", "versionInfo": "v2.24.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sylabs:sif\\/v2:v2.24.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sylabs/sif@v2.24.1#v2"}]}, {"name": "github.com/sylabs/squashfs", "SPDXID": "SPDXRef-Package-go-module-github.com-sylabs-squashfs-f8ed6624f5d17237", "versionInfo": "v1.0.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sylabs:squashfs:v1.0.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sylabs/squashfs@v1.0.6"}]}, {"name": "github.com/sylabs/squashfs", "SPDXID": "SPDXRef-Package-go-module-github.com-sylabs-squashfs-2acb894b326cc89c", "versionInfo": "v1.0.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sylabs:squashfs:v1.0.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sylabs/squashfs@v1.0.6"}]}, {"name": "github.com/tailscale/hujson", "SPDXID": "SPDXRef-Package-go-module-github.com-tailscale-hujson-ffc85ce01e80d1df", "versionInfo": "v0.0.0-20260302212456-ecc657c15afd", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tailscale:hujson:v0.0.0-20260302212456-ecc657c15afd:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/tailscale/hujson@v0.0.0-20260302212456-ecc657c15afd"}]}, {"name": "github.com/tailscale/hujson", "SPDXID": "SPDXRef-Package-go-module-github.com-tailscale-hujson-33cf017cdc0d6243", "versionInfo": "v0.0.0-20260302212456-ecc657c15afd", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tailscale:hujson:v0.0.0-20260302212456-ecc657c15afd:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/tailscale/hujson@v0.0.0-20260302212456-ecc657c15afd"}]}, {"name": "github.com/therootcompany/xz", "SPDXID": "SPDXRef-Package-go-module-github.com-therootcompany-xz-532453fd4b43c144", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:therootcompany:xz:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/therootcompany/xz@v1.0.1"}]}, {"name": "github.com/therootcompany/xz", "SPDXID": "SPDXRef-Package-go-module-github.com-therootcompany-xz-c2dc462e8d76e9d3", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:therootcompany:xz:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/therootcompany/xz@v1.0.1"}]}, {"name": "github.com/tidwall/gjson", "SPDXID": "SPDXRef-Package-go-module-github.com-tidwall-gjson-04338fb47390afd1", "versionInfo": "v1.19.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tidwall:gjson:v1.19.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/tidwall/gjson@v1.19.0"}]}, {"name": "github.com/tidwall/gjson", "SPDXID": "SPDXRef-Package-go-module-github.com-tidwall-gjson-0a8c0e60df52a781", "versionInfo": "v1.19.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tidwall:gjson:v1.19.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/tidwall/gjson@v1.19.0"}]}, {"name": "github.com/tidwall/match", "SPDXID": "SPDXRef-Package-go-module-github.com-tidwall-match-f03a8ca224ae40da", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tidwall:match:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/tidwall/match@v1.1.1"}]}, {"name": "github.com/tidwall/match", "SPDXID": "SPDXRef-Package-go-module-github.com-tidwall-match-173a47710c98e917", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tidwall:match:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/tidwall/match@v1.1.1"}]}, {"name": "github.com/tidwall/pretty", "SPDXID": "SPDXRef-Package-go-module-github.com-tidwall-pretty-fdfa75cc6c742ae7", "versionInfo": "v1.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tidwall:pretty:v1.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/tidwall/pretty@v1.2.1"}]}, {"name": "github.com/tidwall/pretty", "SPDXID": "SPDXRef-Package-go-module-github.com-tidwall-pretty-de9ffa8e8830e8c4", "versionInfo": "v1.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tidwall:pretty:v1.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/tidwall/pretty@v1.2.1"}]}, {"name": "github.com/tidwall/sjson", "SPDXID": "SPDXRef-Package-go-module-github.com-tidwall-sjson-49ec4e4ca8468b25", "versionInfo": "v1.2.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tidwall:sjson:v1.2.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/tidwall/sjson@v1.2.5"}]}, {"name": "github.com/tidwall/sjson", "SPDXID": "SPDXRef-Package-go-module-github.com-tidwall-sjson-35598b98347a05f7", "versionInfo": "v1.2.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tidwall:sjson:v1.2.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/tidwall/sjson@v1.2.5"}]}, {"name": "github.com/ulikunitz/xz", "SPDXID": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-dddc558a2e41841e", "versionInfo": "v0.5.16", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ulikunitz:xz:v0.5.16:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/ulikunitz/xz@v0.5.16"}]}, {"name": "github.com/ulikunitz/xz", "SPDXID": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-b01107ac095a2922", "versionInfo": "v0.5.16", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ulikunitz:xz:v0.5.16:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/ulikunitz/xz@v0.5.16"}]}, {"name": "github.com/umisama/go-cpe", "SPDXID": "SPDXRef-Package-go-module-github.com-umisama-go-cpe-77f1e0e18a85a53f", "versionInfo": "v0.0.0-20190323060751-cdd6c3c28a23", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:umisama:go-cpe:v0.0.0-20190323060751-cdd6c3c28a23:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:umisama:go_cpe:v0.0.0-20190323060751-cdd6c3c28a23:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/umisama/go-cpe@v0.0.0-20190323060751-cdd6c3c28a23"}]}, {"name": "github.com/umisama/go-cpe", "SPDXID": "SPDXRef-Package-go-module-github.com-umisama-go-cpe-34cb07b51035c992", "versionInfo": "v0.0.0-20190323060751-cdd6c3c28a23", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:umisama:go-cpe:v0.0.0-20190323060751-cdd6c3c28a23:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:umisama:go_cpe:v0.0.0-20190323060751-cdd6c3c28a23:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/umisama/go-cpe@v0.0.0-20190323060751-cdd6c3c28a23"}]}, {"name": "github.com/vbatts/go-mtree", "SPDXID": "SPDXRef-Package-go-module-github.com-vbatts-go-mtree-98d17fd6f931f523", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbatts:go-mtree:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbatts:go_mtree:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vbatts/go-mtree@v0.7.0"}]}, {"name": "github.com/vbatts/go-mtree", "SPDXID": "SPDXRef-Package-go-module-github.com-vbatts-go-mtree-a97e83346825d999", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbatts:go-mtree:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbatts:go_mtree:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vbatts/go-mtree@v0.7.0"}]}, {"name": "github.com/vifraa/gopom", "SPDXID": "SPDXRef-Package-go-module-github.com-vifraa-gopom-89cfb173efbe9d44", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vifraa:gopom:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vifraa/gopom@v1.0.0"}]}, {"name": "github.com/vifraa/gopom", "SPDXID": "SPDXRef-Package-go-module-github.com-vifraa-gopom-0db3d570911de48c", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vifraa:gopom:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vifraa/gopom@v1.0.0"}]}, {"name": "github.com/wagoodman/go-partybus", "SPDXID": "SPDXRef-Package-go-module-github.com-wagoodman-go-partybus-688cb61f27aac558", "versionInfo": "v0.0.0-20230516145632-8ccac152c651", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:wagoodman:go-partybus:v0.0.0-20230516145632-8ccac152c651:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:wagoodman:go_partybus:v0.0.0-20230516145632-8ccac152c651:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/wagoodman/go-partybus@v0.0.0-20230516145632-8ccac152c651"}]}, {"name": "github.com/wagoodman/go-partybus", "SPDXID": "SPDXRef-Package-go-module-github.com-wagoodman-go-partybus-ca295408c72c3589", "versionInfo": "v0.0.0-20230516145632-8ccac152c651", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:wagoodman:go-partybus:v0.0.0-20230516145632-8ccac152c651:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:wagoodman:go_partybus:v0.0.0-20230516145632-8ccac152c651:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/wagoodman/go-partybus@v0.0.0-20230516145632-8ccac152c651"}]}, {"name": "github.com/wagoodman/go-presenter", "SPDXID": "SPDXRef-Package-go-module-github.com-wagoodman-go-presenter-f690f436003173ad", "versionInfo": "v0.0.0-20211015174752-f9c01afc824b", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:wagoodman:go-presenter:v0.0.0-20211015174752-f9c01afc824b:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:wagoodman:go_presenter:v0.0.0-20211015174752-f9c01afc824b:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/wagoodman/go-presenter@v0.0.0-20211015174752-f9c01afc824b"}]}, {"name": "github.com/wagoodman/go-presenter", "SPDXID": "SPDXRef-Package-go-module-github.com-wagoodman-go-presenter-647419a50734dd7f", "versionInfo": "v0.0.0-20211015174752-f9c01afc824b", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:wagoodman:go-presenter:v0.0.0-20211015174752-f9c01afc824b:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:wagoodman:go_presenter:v0.0.0-20211015174752-f9c01afc824b:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/wagoodman/go-presenter@v0.0.0-20211015174752-f9c01afc824b"}]}, {"name": "github.com/wagoodman/go-progress", "SPDXID": "SPDXRef-Package-go-module-github.com-wagoodman-go-progress-c5dd24b2be916e24", "versionInfo": "v0.0.0-20260303201901-10176f79b2c0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:wagoodman:go-progress:v0.0.0-20260303201901-10176f79b2c0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:wagoodman:go_progress:v0.0.0-20260303201901-10176f79b2c0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/wagoodman/go-progress@v0.0.0-20260303201901-10176f79b2c0"}]}, {"name": "github.com/wagoodman/go-progress", "SPDXID": "SPDXRef-Package-go-module-github.com-wagoodman-go-progress-1e0b68bacaba481c", "versionInfo": "v0.0.0-20260303201901-10176f79b2c0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:wagoodman:go-progress:v0.0.0-20260303201901-10176f79b2c0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:wagoodman:go_progress:v0.0.0-20260303201901-10176f79b2c0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/wagoodman/go-progress@v0.0.0-20260303201901-10176f79b2c0"}]}, {"name": "github.com/xanzy/ssh-agent", "SPDXID": "SPDXRef-Package-go-module-github.com-xanzy-ssh-agent-a40a80bb17249690", "versionInfo": "v0.3.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:xanzy:ssh-agent:v0.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:xanzy:ssh_agent:v0.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/xanzy/ssh-agent@v0.3.3"}]}, {"name": "github.com/xanzy/ssh-agent", "SPDXID": "SPDXRef-Package-go-module-github.com-xanzy-ssh-agent-ac773c6b2614e9e1", "versionInfo": "v0.3.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:xanzy:ssh-agent:v0.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:xanzy:ssh_agent:v0.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/xanzy/ssh-agent@v0.3.3"}]}, {"name": "github.com/xi2/xz", "SPDXID": "SPDXRef-Package-go-module-github.com-xi2-xz-5aff0dfb6bddc19f", "versionInfo": "v0.0.0-20171230120015-48954b6210f8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:xi2:xz:v0.0.0-20171230120015-48954b6210f8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/xi2/xz@v0.0.0-20171230120015-48954b6210f8"}]}, {"name": "github.com/xi2/xz", "SPDXID": "SPDXRef-Package-go-module-github.com-xi2-xz-eef9653d73903952", "versionInfo": "v0.0.0-20171230120015-48954b6210f8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:xi2:xz:v0.0.0-20171230120015-48954b6210f8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/xi2/xz@v0.0.0-20171230120015-48954b6210f8"}]}, {"name": "github.com/xo/terminfo", "SPDXID": "SPDXRef-Package-go-module-github.com-xo-terminfo-470cccbaad5c75a4", "versionInfo": "v0.0.0-20220910002029-abceb7e1c41e", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:xo:terminfo:v0.0.0-20220910002029-abceb7e1c41e:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/xo/terminfo@v0.0.0-20220910002029-abceb7e1c41e"}]}, {"name": "github.com/xo/terminfo", "SPDXID": "SPDXRef-Package-go-module-github.com-xo-terminfo-5d31e9a19340722b", "versionInfo": "v0.0.0-20220910002029-abceb7e1c41e", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:xo:terminfo:v0.0.0-20220910002029-abceb7e1c41e:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/xo/terminfo@v0.0.0-20220910002029-abceb7e1c41e"}]}, {"name": "github.com/zclconf/go-cty", "SPDXID": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-43dd7739aa469207", "versionInfo": "v1.16.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zclconf:go-cty:v1.16.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zclconf:go_cty:v1.16.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/zclconf/go-cty@v1.16.3"}]}, {"name": "github.com/zclconf/go-cty", "SPDXID": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-fe6325d9f26829a3", "versionInfo": "v1.16.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zclconf:go-cty:v1.16.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zclconf:go_cty:v1.16.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/zclconf/go-cty@v1.16.3"}]}, {"name": "github.com/zyedidia/generic", "SPDXID": "SPDXRef-Package-go-module-github.com-zyedidia-generic-2e1d3ced20587b7f", "versionInfo": "v1.2.2-0.20230320175451-4410d2372cb1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zyedidia:generic:v1.2.2-0.20230320175451-4410d2372cb1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/zyedidia/generic@v1.2.2-0.20230320175451-4410d2372cb1"}]}, {"name": "github.com/zyedidia/generic", "SPDXID": "SPDXRef-Package-go-module-github.com-zyedidia-generic-8f85bec2897890c7", "versionInfo": "v1.2.2-0.20230320175451-4410d2372cb1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zyedidia:generic:v1.2.2-0.20230320175451-4410d2372cb1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/zyedidia/generic@v1.2.2-0.20230320175451-4410d2372cb1"}]}, {"name": "github/codeql-action/upload-sarif", "SPDXID": "SPDXRef-Package-github-action-github-codeql-action-upload-sarif-b2cc4e751bdbff23", "versionInfo": "v4.37.9", "supplier": "Organization: github", "originator": "Organization: github", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /grype-0.119.0/.github/workflows/scorecards.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql-action\\/upload-sarif:github\\/codeql-action\\/upload-sarif:v4.37.9:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql-action\\/upload-sarif:github\\/codeql_action\\/upload_sarif:v4.37.9:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql_action\\/upload_sarif:github\\/codeql-action\\/upload-sarif:v4.37.9:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql_action\\/upload_sarif:github\\/codeql_action\\/upload_sarif:v4.37.9:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql-action\\/upload:github\\/codeql-action\\/upload-sarif:v4.37.9:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql-action\\/upload:github\\/codeql_action\\/upload_sarif:v4.37.9:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql_action\\/upload:github\\/codeql-action\\/upload-sarif:v4.37.9:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql_action\\/upload:github\\/codeql_action\\/upload_sarif:v4.37.9:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/upload-sarif:v4.37.9:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/upload_sarif:v4.37.9:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/github/codeql-action@v4.37.9#upload-sarif"}]}, {"name": "go.etcd.io/bbolt", "SPDXID": "SPDXRef-Package-go-module-go.etcd.io-bbolt-e4d5a1182416541f", "versionInfo": "v1.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.etcd.io/bbolt@v1.4.3"}]}, {"name": "go.etcd.io/bbolt", "SPDXID": "SPDXRef-Package-go-module-go.etcd.io-bbolt-f60ad984415904f5", "versionInfo": "v1.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.etcd.io/bbolt@v1.4.3"}]}, {"name": "go.opencensus.io", "SPDXID": "SPDXRef-Package-go-module-go.opencensus.io-1b1445bd5d28512a", "versionInfo": "v0.24.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opencensus.io@v0.24.0"}]}, {"name": "go.opencensus.io", "SPDXID": "SPDXRef-Package-go-module-go.opencensus.io-89c940803c2a6293", "versionInfo": "v0.24.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opencensus.io@v0.24.0"}]}, {"name": "go.opentelemetry.io/auto/sdk", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-a00544d9cf935bfa", "versionInfo": "v1.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:auto:sdk:v1.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1"}]}, {"name": "go.opentelemetry.io/auto/sdk", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-b85cbf72c4d015b1", "versionInfo": "v1.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:auto:sdk:v1.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1"}]}, {"name": "go.opentelemetry.io/contrib/detectors/gcp", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-detectors-gcp-3dbe8fb028253bc2", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contrib:detectors\\/gcp:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/detectors@v1.44.0#gcp"}]}, {"name": "go.opentelemetry.io/contrib/detectors/gcp", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-detectors-gcp-751a1e252825ce64", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contrib:detectors\\/gcp:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/detectors@v1.44.0#gcp"}]}, {"name": "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-e62b43fb06a0ac34", "versionInfo": "v0.68.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/google.golang.org\\/grpc\\/otelgrpc:v0.68.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation@v0.68.0#google.golang.org/grpc/otelgrpc"}]}, {"name": "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-54e8f7218aa059c0", "versionInfo": "v0.68.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/google.golang.org\\/grpc\\/otelgrpc:v0.68.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation@v0.68.0#google.golang.org/grpc/otelgrpc"}]}, {"name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-5cd65f4253c81a65", "versionInfo": "v0.68.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/otelhttp:v0.68.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation@v0.68.0#net/http/otelhttp"}]}, {"name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-12ca537122616aed", "versionInfo": "v0.68.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/otelhttp:v0.68.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation@v0.68.0#net/http/otelhttp"}]}, {"name": "go.opentelemetry.io/otel", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-458f9251810739a4", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel@v1.44.0"}]}, {"name": "go.opentelemetry.io/otel", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-a58f1e964cc00109", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel@v1.44.0"}]}, {"name": "go.opentelemetry.io/otel/metric", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-35f7f9ed1665e42b", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:metric:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/metric@v1.44.0"}]}, {"name": "go.opentelemetry.io/otel/metric", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-957f5515924b3e23", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:metric:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/metric@v1.44.0"}]}, {"name": "go.opentelemetry.io/otel/sdk", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-182b6051dc7fda66", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:sdk:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.44.0"}]}, {"name": "go.opentelemetry.io/otel/sdk", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-5f4c52f8605b42db", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:sdk:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.44.0"}]}, {"name": "go.opentelemetry.io/otel/sdk/metric", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-6c6a1785787b5a4d", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:sdk\\/metric:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.44.0#metric"}]}, {"name": "go.opentelemetry.io/otel/sdk/metric", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-da1c8a91f8418476", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:sdk\\/metric:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.44.0#metric"}]}, {"name": "go.opentelemetry.io/otel/trace", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-9903b7930f5fcede", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:trace:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/trace@v1.44.0"}]}, {"name": "go.opentelemetry.io/otel/trace", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-d9cda6fdda56a8b2", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:trace:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/trace@v1.44.0"}]}, {"name": "go.yaml.in/yaml/v3", "SPDXID": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-4fc93c87aeebc64b", "versionInfo": "v3.0.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml:v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.yaml.in/yaml/v3@v3.0.5"}]}, {"name": "go.yaml.in/yaml/v3", "SPDXID": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-1569d256c4eba32a", "versionInfo": "v3.0.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml:v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.yaml.in/yaml/v3@v3.0.5"}]}, {"name": "go.yaml.in/yaml/v4", "SPDXID": "SPDXRef-Package-go-module-go.yaml.in-yaml-v4-82de4183b05be72f", "versionInfo": "v4.0.0-rc.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml:v4:v4.0.0-rc.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.yaml.in/yaml/v4@v4.0.0-rc.2"}]}, {"name": "go.yaml.in/yaml/v4", "SPDXID": "SPDXRef-Package-go-module-go.yaml.in-yaml-v4-28316b09700feba5", "versionInfo": "v4.0.0-rc.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml:v4:v4.0.0-rc.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.yaml.in/yaml/v4@v4.0.0-rc.2"}]}, {"name": "go4.org", "SPDXID": "SPDXRef-Package-go-module-go4.org-9af3b7878e4b5c1f", "versionInfo": "v0.0.0-20230225012048-214862532bf5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go4.org@v0.0.0-20230225012048-214862532bf5"}]}, {"name": "go4.org", "SPDXID": "SPDXRef-Package-go-module-go4.org-496e597a7e464f67", "versionInfo": "v0.0.0-20230225012048-214862532bf5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go4.org@v0.0.0-20230225012048-214862532bf5"}]}, {"name": "golang.org/x/crypto", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-crypto-68d3b962d07abc2f", "versionInfo": "v0.56.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:ssh:v0.56.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/crypto@v0.56.0"}]}, {"name": "golang.org/x/crypto", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-crypto-e514dcf469e6310b", "versionInfo": "v0.56.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:ssh:v0.56.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/crypto@v0.56.0"}]}, {"name": "golang.org/x/exp", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-exp-4fe995c7f92fafc3", "versionInfo": "v0.0.0-20260410095643-746e56fc9e2f", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/exp:v0.0.0-20260410095643-746e56fc9e2f:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/exp@v0.0.0-20260410095643-746e56fc9e2f"}]}, {"name": "golang.org/x/exp", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-exp-3f5af6d1997471c6", "versionInfo": "v0.0.0-20260410095643-746e56fc9e2f", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/exp:v0.0.0-20260410095643-746e56fc9e2f:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/exp@v0.0.0-20260410095643-746e56fc9e2f"}]}, {"name": "golang.org/x/mod", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-mod-e2292a330881cf62", "versionInfo": "v0.37.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/.make/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/mod:v0.37.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/mod@v0.37.0"}]}, {"name": "golang.org/x/mod", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-mod-56d232e7120c3a8b", "versionInfo": "v0.41.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/mod:v0.41.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/mod@v0.41.0"}]}, {"name": "golang.org/x/mod", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-mod-4a27469cc352a0fc", "versionInfo": "v0.41.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/mod:v0.41.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/mod@v0.41.0"}]}, {"name": "golang.org/x/net", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-net-5b92054f073affe6", "versionInfo": "v0.0.0-20220225172249-27dd8689420f", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/grype/matcher/golang/testdata/gobin-xnet-html/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:networking:v0.0.0-20220225172249-27dd8689420f:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/net@v0.0.0-20220225172249-27dd8689420f"}]}, {"name": "golang.org/x/net", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-net-e01312e499e41c80", "versionInfo": "v0.0.0-20220225172249-27dd8689420f", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/grype/matcher/golang/testdata/gobin-xnet-http2server/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:networking:v0.0.0-20220225172249-27dd8689420f:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/net@v0.0.0-20220225172249-27dd8689420f"}]}, {"name": "golang.org/x/net", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-net-f556606ebb1221ee", "versionInfo": "v0.58.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:networking:v0.58.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/net@v0.58.0"}]}, {"name": "golang.org/x/net", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-net-fd71c35e086458fc", "versionInfo": "v0.58.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:networking:v0.58.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/net@v0.58.0"}]}, {"name": "golang.org/x/oauth2", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-oauth2-78c10eb5d81f36d3", "versionInfo": "v0.36.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/oauth2:v0.36.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/oauth2@v0.36.0"}]}, {"name": "golang.org/x/oauth2", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-oauth2-59074934b0cd2f37", "versionInfo": "v0.36.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/oauth2:v0.36.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/oauth2@v0.36.0"}]}, {"name": "golang.org/x/sync", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sync-1e9b8c91e22e88f0", "versionInfo": "v0.22.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sync:v0.22.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sync@v0.22.0"}]}, {"name": "golang.org/x/sync", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sync-11295fd5db771a70", "versionInfo": "v0.22.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sync:v0.22.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sync@v0.22.0"}]}, {"name": "golang.org/x/sys", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sys-1ac0c60afa1089df", "versionInfo": "v0.46.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/.make/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sys:v0.46.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sys@v0.46.0"}]}, {"name": "golang.org/x/sys", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sys-009b0ba8c25f5f40", "versionInfo": "v0.47.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sys:v0.47.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sys@v0.47.0"}]}, {"name": "golang.org/x/sys", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sys-8792dfeacf365a8a", "versionInfo": "v0.47.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sys:v0.47.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sys@v0.47.0"}]}, {"name": "golang.org/x/term", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-term-cd7992b205dbcbfe", "versionInfo": "v0.45.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/term:v0.45.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/term@v0.45.0"}]}, {"name": "golang.org/x/term", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-term-b9d932bf025cdc58", "versionInfo": "v0.45.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/term:v0.45.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/term@v0.45.0"}]}, {"name": "golang.org/x/text", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-text-9a81c488f3ad8d93", "versionInfo": "v0.3.7", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/grype/matcher/golang/testdata/gobin-xnet-http2server/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:text:v0.3.7:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/text@v0.3.7"}]}, {"name": "golang.org/x/text", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-text-a3883bc5333631e4", "versionInfo": "v0.41.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:text:v0.41.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/text@v0.41.0"}]}, {"name": "golang.org/x/text", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-text-2cb9597aaebee04b", "versionInfo": "v0.41.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:text:v0.41.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/text@v0.41.0"}]}, {"name": "golang.org/x/time", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-time-90e57fc7c651498e", "versionInfo": "v0.16.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/time:v0.16.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/time@v0.16.0"}]}, {"name": "golang.org/x/time", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-time-d71278c90eda02b0", "versionInfo": "v0.16.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/time:v0.16.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/time@v0.16.0"}]}, {"name": "golang.org/x/tools", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-tools-1d0c1f0fc356ce03", "versionInfo": "v0.49.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/tools:v0.49.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/tools@v0.49.0"}]}, {"name": "golang.org/x/tools", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-tools-bb0af48b1df4021b", "versionInfo": "v0.49.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/tools:v0.49.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/tools@v0.49.0"}]}, {"name": "golang.org/x/xerrors", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-xerrors-056fc8b658138e7a", "versionInfo": "v0.0.0-20240903120638-7835f813f4da", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/xerrors:v0.0.0-20240903120638-7835f813f4da:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/xerrors@v0.0.0-20240903120638-7835f813f4da"}]}, {"name": "golang.org/x/xerrors", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-xerrors-7a5c4b13633fe5f4", "versionInfo": "v0.0.0-20240903120638-7835f813f4da", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/xerrors:v0.0.0-20240903120638-7835f813f4da:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/xerrors@v0.0.0-20240903120638-7835f813f4da"}]}, {"name": "gonum.org/v1/gonum", "SPDXID": "SPDXRef-Package-go-module-gonum.org-v1-gonum-f553e50691c64718", "versionInfo": "v0.17.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:v1:gonum:v0.17.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/gonum.org/v1/gonum@v0.17.0"}]}, {"name": "gonum.org/v1/gonum", "SPDXID": "SPDXRef-Package-go-module-gonum.org-v1-gonum-dbda39230178b89b", "versionInfo": "v0.17.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:v1:gonum:v0.17.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/gonum.org/v1/gonum@v0.17.0"}]}, {"name": "google.golang.org/api", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-api-0f1f223a702c8b97", "versionInfo": "v0.294.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:api:v0.294.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/api@v0.294.0"}]}, {"name": "google.golang.org/api", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-api-4f4ed3d8cb92c940", "versionInfo": "v0.294.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:api:v0.294.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/api@v0.294.0"}]}, {"name": "google.golang.org/genproto", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-64224fe56b48ea1d", "versionInfo": "v0.0.0-20260715232425-e75dac1f907d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260715232425-e75dac1f907d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto@v0.0.0-20260715232425-e75dac1f907d"}]}, {"name": "google.golang.org/genproto", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-1049b3a34d385509", "versionInfo": "v0.0.0-20260715232425-e75dac1f907d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260715232425-e75dac1f907d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto@v0.0.0-20260715232425-e75dac1f907d"}]}, {"name": "google.golang.org/genproto/googleapis/api", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-d6e204d5b39cc3d9", "versionInfo": "v0.0.0-20260715232425-e75dac1f907d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260715232425-e75dac1f907d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260715232425-e75dac1f907d#api"}]}, {"name": "google.golang.org/genproto/googleapis/api", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-a89e3751f7ab60f1", "versionInfo": "v0.0.0-20260715232425-e75dac1f907d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260715232425-e75dac1f907d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260715232425-e75dac1f907d#api"}]}, {"name": "google.golang.org/genproto/googleapis/rpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-1c231c21367d6661", "versionInfo": "v0.0.0-20260819154853-08b0e4226688", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260819154853-08b0e4226688:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260819154853-08b0e4226688#rpc"}]}, {"name": "google.golang.org/genproto/googleapis/rpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-ba216fed2a0d570f", "versionInfo": "v0.0.0-20260819154853-08b0e4226688", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260819154853-08b0e4226688:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260819154853-08b0e4226688#rpc"}]}, {"name": "google.golang.org/grpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-grpc-73ac7fbf7679b398", "versionInfo": "v1.83.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:grpc:v1.83.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/grpc@v1.83.2"}]}, {"name": "google.golang.org/grpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-grpc-9f66238c5f4411e5", "versionInfo": "v1.83.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:grpc:v1.83.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/grpc@v1.83.2"}]}, {"name": "google.golang.org/protobuf", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-protobuf-0055873c0ce1a39b", "versionInfo": "v1.36.12", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:protobuf:v1.36.12:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/protobuf@v1.36.12"}]}, {"name": "google.golang.org/protobuf", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-protobuf-50226e5d4bbd723b", "versionInfo": "v1.36.12", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:protobuf:v1.36.12:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/protobuf@v1.36.12"}]}, {"name": "gopkg.in/warnings.v0", "SPDXID": "SPDXRef-Package-go-module-gopkg.in-warnings.v0-8ac617c9f7dfb7cd", "versionInfo": "v0.1.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/gopkg.in/warnings.v0@v0.1.2"}]}, {"name": "gopkg.in/warnings.v0", "SPDXID": "SPDXRef-Package-go-module-gopkg.in-warnings.v0-ad01776c7dce5d1f", "versionInfo": "v0.1.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/gopkg.in/warnings.v0@v0.1.2"}]}, {"name": "gopkg.in/yaml.v3", "SPDXID": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-716c668b92999095", "versionInfo": "v3.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml_project:yaml:v3.0.1:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/gopkg.in/yaml.v3@v3.0.1"}]}, {"name": "gopkg.in/yaml.v3", "SPDXID": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-7837bc368c6abc6d", "versionInfo": "v3.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml_project:yaml:v3.0.1:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/gopkg.in/yaml.v3@v3.0.1"}]}, {"name": "gorm.io/gorm", "SPDXID": "SPDXRef-Package-go-module-gorm.io-gorm-4c458b1192ddedc0", "versionInfo": "v1.31.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/gorm.io/gorm@v1.31.2"}]}, {"name": "gorm.io/gorm", "SPDXID": "SPDXRef-Package-go-module-gorm.io-gorm-d0a76ddfbc00d7a3", "versionInfo": "v1.31.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/gorm.io/gorm@v1.31.2"}]}, {"name": "hasql-dynamic-statements", "SPDXID": "SPDXRef-Package-hackage-hasql-dynamic-statements-00ca9334cc8d0a40", "versionInfo": "0.3.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from cabal or stack manifest files: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/haskell/stack.yaml.lock", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hasql-dynamic-statements:hasql-dynamic-statements:0.3.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hasql-dynamic-statements:hasql_dynamic_statements:0.3.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hasql_dynamic_statements:hasql-dynamic-statements:0.3.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hasql_dynamic_statements:hasql_dynamic_statements:0.3.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hasql-dynamic:hasql-dynamic-statements:0.3.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hasql-dynamic:hasql_dynamic_statements:0.3.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hasql_dynamic:hasql-dynamic-statements:0.3.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hasql_dynamic:hasql_dynamic_statements:0.3.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hasql:hasql-dynamic-statements:0.3.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hasql:hasql_dynamic_statements:0.3.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:hackage/hasql-dynamic-statements@0.3.1.1"}]}, {"name": "hasql-implicits", "SPDXID": "SPDXRef-Package-hackage-hasql-implicits-e0da11562366ca35", "versionInfo": "0.1.0.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from cabal or stack manifest files: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/haskell/stack.yaml.lock", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hasql-implicits:hasql-implicits:0.1.0.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hasql-implicits:hasql_implicits:0.1.0.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hasql_implicits:hasql-implicits:0.1.0.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hasql_implicits:hasql_implicits:0.1.0.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hasql:hasql-implicits:0.1.0.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hasql:hasql_implicits:0.1.0.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:hackage/hasql-implicits@0.1.0.4"}]}, {"name": "hasql-pool", "SPDXID": "SPDXRef-Package-hackage-hasql-pool-ef7938fbe654b672", "versionInfo": "0.5.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from cabal or stack manifest files: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/haskell/stack.yaml.lock", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hasql-pool:hasql-pool:0.5.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hasql-pool:hasql_pool:0.5.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hasql_pool:hasql-pool:0.5.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hasql_pool:hasql_pool:0.5.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hasql:hasql-pool:0.5.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hasql:hasql_pool:0.5.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:hackage/hasql-pool@0.5.2.2"}]}, {"name": "howett.net/plist", "SPDXID": "SPDXRef-Package-go-module-howett.net-plist-a367099a7cb19630", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/howett.net/plist@v1.0.1"}]}, {"name": "howett.net/plist", "SPDXID": "SPDXRef-Package-go-module-howett.net-plist-611dfc0e7c7a7dcb", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/howett.net/plist@v1.0.1"}]}, {"name": "hspec", "SPDXID": "SPDXRef-Package-hackage-hspec-8dec45f676526a18", "versionInfo": "2.9.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from cabal or stack manifest files: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/haskell/stack.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hspec:hspec:2.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:hackage/hspec@2.9.4"}]}, {"name": "hspec-core", "SPDXID": "SPDXRef-Package-hackage-hspec-core-44ae212da2d95c23", "versionInfo": "2.9.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from cabal or stack manifest files: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/haskell/stack.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hspec-core:hspec-core:2.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hspec-core:hspec_core:2.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hspec_core:hspec-core:2.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hspec_core:hspec_core:2.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hspec:hspec-core:2.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hspec:hspec_core:2.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:hackage/hspec-core@2.9.4"}]}, {"name": "hspec-discover", "SPDXID": "SPDXRef-Package-hackage-hspec-discover-5d0fbe70c542ce4b", "versionInfo": "2.9.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from cabal or stack manifest files: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/haskell/stack.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hspec-discover:hspec-discover:2.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hspec-discover:hspec_discover:2.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hspec_discover:hspec-discover:2.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hspec_discover:hspec_discover:2.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hspec:hspec-discover:2.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hspec:hspec_discover:2.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:hackage/hspec-discover@2.9.4"}]}, {"name": "jdk", "SPDXID": "SPDXRef-Package-binary-jdk-3cf5330955a84ab1", "versionInfo": "1.8.0_400-b07", "supplier": "Organization: Oracle", "originator": "Organization: Oracle", "downloadLocation": "NOASSERTION", "filesAnalyzed": true, "packageVerificationCode": {"packageVerificationCodeValue": "dcf0b57b34b2b0c84fb43d94d483de4578ba3270"}, "sourceInfo": "acquired package info from the following paths: /grype-0.119.0/test/integration/testdata/image-jvm-match-coverage/opt/java/openjdk/release", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oracle:java_se:1.8.0:update400:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oracle:jre:1.8.0:update400:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oracle:jdk:1.8.0:update400:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/oracle/jdk@1.8.0_400-b07"}]}, {"name": "joda-time", "SPDXID": "SPDXRef-Package-java-archive-joda-time-eaa4d4b3bd89d483", "versionInfo": "2.9.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from installed java archive: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/java/example-java-app-maven-0.1.0.jar", "licenseConcluded": "NOASSERTION", "licenseDeclared": "LicenseRef-Apache-2", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:joda-time:joda-time:2.9.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:joda-time:joda_time:2.9.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:joda_time:joda-time:2.9.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:joda_time:joda_time:2.9.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:joda:joda-time:2.9.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:joda:joda_time:2.9.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:maven/joda-time/joda-time@2.9.2"}]}, {"name": "ko", "SPDXID": "SPDXRef-Package-apk-ko-03a50c942696e292", "versionInfo": "0.15.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from APK DB: /grype-0.119.0/test/integration/testdata/image-alpine-match-coverage/lib/apk/db/installed", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "description": "Build and deploy Go applications", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ko:ko:0.15.1:*:*:*:*:*:*:*"}]}, {"name": "language-docker", "SPDXID": "SPDXRef-Package-hackage-language-docker-b051fe983f986608", "versionInfo": "11.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from cabal or stack manifest files: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/haskell/stack.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:language-docker:language-docker:11.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:language-docker:language_docker:11.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:language_docker:language-docker:11.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:language_docker:language_docker:11.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:language:language-docker:11.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:language:language_docker:11.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:hackage/language-docker@11.0.0"}]}, {"name": "lens-aeson", "SPDXID": "SPDXRef-Package-hackage-lens-aeson-0c216abd2ca65e69", "versionInfo": "1.1.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from cabal or stack manifest files: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/haskell/stack.yaml.lock", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lens-aeson:lens-aeson:1.1.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lens-aeson:lens_aeson:1.1.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lens_aeson:lens-aeson:1.1.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lens_aeson:lens_aeson:1.1.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lens:lens-aeson:1.1.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lens:lens_aeson:1.1.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:hackage/lens-aeson@1.1.3"}]}, {"name": "libvncserver", "SPDXID": "SPDXRef-Package-apk-libvncserver-5b91062e766611f9", "versionInfo": "0.9.9", "supplier": "Person: A. Wilcox (awilfox@adelielinux.org)", "originator": "Person: A. Wilcox (awilfox@adelielinux.org)", "downloadLocation": "http://libvncserver.sourceforge.net/", "filesAnalyzed": false, "sourceInfo": "acquired package info from APK DB: /grype-0.119.0/test/integration/testdata/image-alpine-match-coverage/lib/apk/db/installed", "licenseConcluded": "NOASSERTION", "licenseDeclared": "GPL-2.0-or-later", "copyrightText": "NOASSERTION", "description": "Library to make writing a vnc server easy", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:libvncserver:libvncserver:0.9.9:*:*:*:*:*:*:*"}]}, {"name": "modernc.org/libc", "SPDXID": "SPDXRef-Package-go-module-modernc.org-libc-7c2e7d67ac7410ce", "versionInfo": "v1.75.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/modernc.org/libc@v1.75.6"}]}, {"name": "modernc.org/libc", "SPDXID": "SPDXRef-Package-go-module-modernc.org-libc-9055c56cfa7635bd", "versionInfo": "v1.75.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/modernc.org/libc@v1.75.6"}]}, {"name": "modernc.org/mathutil", "SPDXID": "SPDXRef-Package-go-module-modernc.org-mathutil-610e3c135e640d33", "versionInfo": "v1.7.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/modernc.org/mathutil@v1.7.1"}]}, {"name": "modernc.org/mathutil", "SPDXID": "SPDXRef-Package-go-module-modernc.org-mathutil-c1298f2812899ed6", "versionInfo": "v1.7.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/modernc.org/mathutil@v1.7.1"}]}, {"name": "modernc.org/memory", "SPDXID": "SPDXRef-Package-go-module-modernc.org-memory-a7fc43f05c222875", "versionInfo": "v1.12.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/modernc.org/memory@v1.12.1"}]}, {"name": "modernc.org/memory", "SPDXID": "SPDXRef-Package-go-module-modernc.org-memory-0c296ab1a5739a3c", "versionInfo": "v1.12.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/modernc.org/memory@v1.12.1"}]}, {"name": "modernc.org/sqlite", "SPDXID": "SPDXRef-Package-go-module-modernc.org-sqlite-372f331b53d7b47f", "versionInfo": "v1.58.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/modernc.org/sqlite@v1.58.0"}]}, {"name": "modernc.org/sqlite", "SPDXID": "SPDXRef-Package-go-module-modernc.org-sqlite-6db33cdca5cac74f", "versionInfo": "v1.58.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /grype-0.119.0/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/modernc.org/sqlite@v1.58.0"}]}, {"name": "npm-apk-subpackage-with-false-positive", "SPDXID": "SPDXRef-Package-apk-npm-apk-subpackage-with-false-positive-ac599a0cbbf682cd", "versionInfo": "7.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from APK DB: /grype-0.119.0/test/integration/testdata/image-alpine-match-coverage/lib/apk/db/installed", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "description": "NPM package, in an APK subpackage, that has a false positive", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:npm-apk-subpackage-with-false-positive:npm-apk-subpackage-with-false-positive:7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:npm-apk-subpackage-with-false-positive:npm_apk_subpackage_with_false_positive:7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:npm_apk_subpackage_with_false_positive:npm-apk-subpackage-with-false-positive:7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:npm_apk_subpackage_with_false_positive:npm_apk_subpackage_with_false_positive:7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:npm-apk-subpackage-with-false:npm-apk-subpackage-with-false-positive:7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:npm-apk-subpackage-with-false:npm_apk_subpackage_with_false_positive:7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:npm_apk_subpackage_with_false:npm-apk-subpackage-with-false-positive:7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:npm_apk_subpackage_with_false:npm_apk_subpackage_with_false_positive:7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:npm-apk-subpackage-with:npm-apk-subpackage-with-false-positive:7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:npm-apk-subpackage-with:npm_apk_subpackage_with_false_positive:7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:npm_apk_subpackage_with:npm-apk-subpackage-with-false-positive:7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:npm_apk_subpackage_with:npm_apk_subpackage_with_false_positive:7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:npm-apk-subpackage:npm-apk-subpackage-with-false-positive:7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:npm-apk-subpackage:npm_apk_subpackage_with_false_positive:7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:npm_apk_subpackage:npm-apk-subpackage-with-false-positive:7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:npm_apk_subpackage:npm_apk_subpackage_with_false_positive:7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:npm-apk:npm-apk-subpackage-with-false-positive:7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:npm-apk:npm_apk_subpackage_with_false_positive:7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:npm_apk:npm-apk-subpackage-with-false-positive:7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:npm_apk:npm_apk_subpackage_with_false_positive:7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:npm:npm-apk-subpackage-with-false-positive:7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:npm:npm_apk_subpackage_with_false_positive:7.0.0:*:*:*:*:*:*:*"}]}, {"name": "optparse-applicative", "SPDXID": "SPDXRef-Package-hackage-optparse-applicative-cab0662d28cc5acc", "versionInfo": "0.16.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from cabal or stack manifest files: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/haskell/stack.yaml.lock", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:optparse-applicative:optparse-applicative:0.16.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:optparse-applicative:optparse_applicative:0.16.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:optparse_applicative:optparse-applicative:0.16.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:optparse_applicative:optparse_applicative:0.16.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:optparse:optparse-applicative:0.16.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:optparse:optparse_applicative:0.16.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:hackage/optparse-applicative@0.16.1.0"}]}, {"name": "ossf/scorecard-action", "SPDXID": "SPDXRef-Package-github-action-ossf-scorecard-action-86495b7307b61fb5", "versionInfo": "v2.4.3", "supplier": "Organization: ossf", "originator": "Organization: ossf", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /grype-0.119.0/.github/workflows/scorecards.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ossf\\/scorecard-action:ossf\\/scorecard-action:v2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ossf\\/scorecard-action:ossf\\/scorecard_action:v2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ossf\\/scorecard_action:ossf\\/scorecard-action:v2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ossf\\/scorecard_action:ossf\\/scorecard_action:v2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ossf\\/scorecard:ossf\\/scorecard-action:v2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ossf\\/scorecard:ossf\\/scorecard_action:v2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/ossf/scorecard-action@v2.4.3"}]}, {"name": "plug", "SPDXID": "SPDXRef-Package-hex-plug-f6db7fde905faa24", "versionInfo": "1.11.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from rebar3 or mix manifest file: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/hex/mix.lock", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:plug:plug:1.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:hex/plug@1.11.0"}]}, {"name": "protolude", "SPDXID": "SPDXRef-Package-hackage-protolude-f491d96080c8bcef", "versionInfo": "0.3.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from cabal or stack manifest files: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/haskell/stack.yaml.lock", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:protolude:protolude:0.3.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:hackage/protolude@0.3.2"}]}, {"name": "ptr", "SPDXID": "SPDXRef-Package-hackage-ptr-8dea2c4dce05107d", "versionInfo": "0.16.8.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from cabal or stack manifest files: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/haskell/stack.yaml.lock", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ptr:ptr:0.16.8.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:hackage/ptr@0.16.8.2"}]}, {"name": "pygments", "SPDXID": "SPDXRef-Package-python-pygments-8df22a295e7d036c", "versionInfo": "2.6.1", "supplier": "Person: Georg Brandl (georg@python.org)", "originator": "Person: Georg Brandl (georg@python.org)", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from installed python package manifest file: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/python/dist-info/METADATA, /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/python/dist-info/top_level.txt", "licenseConcluded": "NOASSERTION", "licenseDeclared": "LicenseRef-BSD-License", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:georg_brandl_project:python-pygments:2.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:georg_brandl_project:python_pygments:2.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:georg_brandlproject:python-pygments:2.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:georg_brandlproject:python_pygments:2.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python-pygments:python-pygments:2.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python-pygments:python_pygments:2.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python_pygments:python-pygments:2.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python_pygments:python_pygments:2.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:georg_brandl_project:pygments:2.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:georg_project:python-pygments:2.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:georg_project:python_pygments:2.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:georg_brandl:python-pygments:2.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:georg_brandl:python_pygments:2.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:georg_brandlproject:pygments:2.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:georgproject:python-pygments:2.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:georgproject:python_pygments:2.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pygments:python-pygments:2.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pygments:python_pygments:2.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python-pygments:pygments:2.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python_pygments:pygments:2.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:georg_project:pygments:2.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python:python-pygments:2.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python:python_pygments:2.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:georg:python-pygments:2.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:georg:python_pygments:2.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:georg_brandl:pygments:2.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:georgproject:pygments:2.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pygments:pygments:2.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python:pygments:2.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:georg:pygments:2.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:pypi/pygments@2.6.1"}]}, {"name": "rails", "SPDXID": "SPDXRef-Package-gem-rails-0bffe6003cf32471", "versionInfo": "4.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from installed gem metadata file: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/ruby/Gemfile.lock", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rubyonrails:ruby_on_rails:4.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rubyonrails:rails:4.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:gem/rails@4.1.1"}]}, {"name": "sigstore/cosign-installer", "SPDXID": "SPDXRef-Package-github-action-sigstore-cosign-installer-cc1df9a3429cbc80", "versionInfo": "v4.1.2", "supplier": "Organization: sigstore", "originator": "Organization: sigstore", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /grype-0.119.0/.github/workflows/validations.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sigstore\\/cosign-installer:sigstore\\/cosign-installer:v4.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sigstore\\/cosign-installer:sigstore\\/cosign_installer:v4.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sigstore\\/cosign_installer:sigstore\\/cosign-installer:v4.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sigstore\\/cosign_installer:sigstore\\/cosign_installer:v4.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sigstore\\/cosign:sigstore\\/cosign-installer:v4.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sigstore\\/cosign:sigstore\\/cosign_installer:v4.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/sigstore/cosign-installer@v4.1.2"}]}, {"name": "spdx", "SPDXID": "SPDXRef-Package-hackage-spdx-449fc4c88dd8be98", "versionInfo": "1.0.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from cabal or stack manifest files: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/haskell/stack.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spdx:spdx:1.0.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:hackage/spdx@1.0.0.2"}]}, {"name": "stm", "SPDXID": "SPDXRef-Package-hackage-stm-dd2962ef63785317", "versionInfo": "2.5.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from cabal or stack manifest files: /grype-0.119.0/test/integration/testdata/image-debian-match-coverage/haskell/stack.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:stm:stm:2.5.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:hackage/stm@2.5.0.2"}]}, {"name": "tabulate", "SPDXID": "SPDXRef-Package-python-tabulate-3e262514354ce16d", "versionInfo": "0.9.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from installed python package manifest file: /grype-0.119.0/test/quality/requirements.txt", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python-tabulate:python-tabulate:0.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python-tabulate:python_tabulate:0.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python_tabulate:python-tabulate:0.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python_tabulate:python_tabulate:0.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python-tabulate:tabulate:0.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python_tabulate:tabulate:0.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tabulate:python-tabulate:0.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tabulate:python_tabulate:0.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python:python-tabulate:0.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python:python_tabulate:0.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tabulate:tabulate:0.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python:tabulate:0.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:pypi/tabulate@0.9.0"}]}, {"name": "yardstick", "SPDXID": "SPDXRef-Package-python-yardstick-6061edcbf25c040d", "versionInfo": "v0.15.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from installed python package manifest file: /grype-0.119.0/test/quality/requirements.txt", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python-yardstick:python-yardstick:v0.15.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python-yardstick:python_yardstick:v0.15.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python_yardstick:python-yardstick:v0.15.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python_yardstick:python_yardstick:v0.15.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python-yardstick:yardstick:v0.15.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python_yardstick:yardstick:v0.15.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yardstick:python-yardstick:v0.15.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yardstick:python_yardstick:v0.15.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python:python-yardstick:v0.15.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python:python_yardstick:v0.15.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yardstick:yardstick:v0.15.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python:yardstick:v0.15.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:pypi/yardstick@v0.15.0"}]}, {"name": "zizmorcore/zizmor-action", "SPDXID": "SPDXRef-Package-github-action-zizmorcore-zizmor-action-2a3b7b188c16f824", "versionInfo": "v0.6.3", "supplier": "Organization: zizmorcore", "originator": "Organization: zizmorcore", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /grype-0.119.0/.github/workflows/validate-github-actions.yaml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zizmorcore\\/zizmor-action:zizmorcore\\/zizmor-action:v0.6.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zizmorcore\\/zizmor-action:zizmorcore\\/zizmor_action:v0.6.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zizmorcore\\/zizmor_action:zizmorcore\\/zizmor-action:v0.6.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zizmorcore\\/zizmor_action:zizmorcore\\/zizmor_action:v0.6.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zizmorcore\\/zizmor:zizmorcore\\/zizmor-action:v0.6.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zizmorcore\\/zizmor:zizmorcore\\/zizmor_action:v0.6.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/zizmorcore/zizmor-action@v0.6.3"}]}, {"name": "rpm-extracted/grype-0.119.0-0.2.hum1.src", "SPDXID": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "grype", "SPDXID": "SPDXRef-Package-rpm-grype-173f2ac4637b951e", "versionInfo": "0.119.0-0.2.hum1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from RPM DB: /usr/lib/debug/usr/bin/grype-0.119.0-0.2.hum1.aarch64.debug", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grype:grype:0.119.0-0.2.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/hummingbird/grype@0.119.0-0.2.hum1?distro=hummingbird-1"}]}, {"name": "rpm-extracted/grype-debuginfo-0.119.0-0.2.hum1.aarch64", "SPDXID": "SPDXRef-Directory-Root-grype-debuginfo-0.119.0-0.2.hum1.aarch64", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "rpm-extracted/grype-debugsource-0.119.0-0.2.hum1.aarch64", "SPDXID": "SPDXRef-Directory-Root-grype-debugsource-0.119.0-0.2.hum1.aarch64", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "cel.dev/expr", "SPDXID": "SPDXRef-Package-go-module-cel.dev-expr-66459580bf7a7e04", "versionInfo": "v0.25.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cel.dev/expr@v0.25.2"}]}, {"name": "cloud.google.com/go", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-96f30eed3dcf47d6", "versionInfo": "v0.123.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go@v0.123.0"}]}, {"name": "cloud.google.com/go/auth", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-auth-d1315c1ed6472c98", "versionInfo": "v0.23.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:auth:v0.23.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/auth@v0.23.2"}]}, {"name": "cloud.google.com/go/auth/oauth2adapt", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-8daf85f07d1f9bd4", "versionInfo": "v0.2.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:auth\\/oauth2adapt:v0.2.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/auth@v0.2.8#oauth2adapt"}]}, {"name": "cloud.google.com/go/compute/metadata", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-b8b9e3d458661ae5", "versionInfo": "v0.9.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:compute\\/metadata:v0.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/compute@v0.9.0#metadata"}]}, {"name": "cloud.google.com/go/iam", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-iam-ea6e46a2627f6639", "versionInfo": "v1.12.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:iam:v1.12.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/iam@v1.12.0"}]}, {"name": "cloud.google.com/go/monitoring", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-monitoring-b6e32202d8793812", "versionInfo": "v1.30.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:monitoring:v1.30.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/monitoring@v1.30.0"}]}, {"name": "cloud.google.com/go/storage", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-storage-76c0a18b76e9137b", "versionInfo": "v1.65.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:storage:v1.65.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/storage@v1.65.1"}]}, {"name": "dario.cat/mergo", "SPDXID": "SPDXRef-Package-go-module-dario.cat-mergo-7deae5420e1b47ee", "versionInfo": "v1.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/dario.cat/mergo@v1.0.2"}]}, {"name": "github.com/BurntSushi/toml", "SPDXID": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-dae48cfe6416f229", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:BurntSushi:toml:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/BurntSushi/toml@v1.6.0"}]}, {"name": "github.com/CycloneDX/cyclonedx-go", "SPDXID": "SPDXRef-Package-go-module-github.com-CycloneDX-cyclonedx-go-d959068b8fc63e2e", "versionInfo": "v0.12.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:CycloneDX:cyclonedx-go:v0.12.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:CycloneDX:cyclonedx_go:v0.12.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/CycloneDX/cyclonedx-go@v0.12.0"}]}, {"name": "github.com/DataDog/zstd", "SPDXID": "SPDXRef-Package-go-module-github.com-DataDog-zstd-45f62db135a90027", "versionInfo": "v1.5.7", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:DataDog:zstd:v1.5.7:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/DataDog/zstd@v1.5.7"}]}, {"name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp", "SPDXID": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-detectors-gcp-fc5e355d4bbe3248", "versionInfo": "v1.33.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry-operations-go\\/detectors\\/gcp:v1.33.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry_operations_go\\/detectors\\/gcp:v1.33.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go@v1.33.0#detectors/gcp"}]}, {"name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric", "SPDXID": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-exporter-metric-4404509dfe209dc7", "versionInfo": "v0.57.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry-operations-go\\/exporter\\/metric:v0.57.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry_operations_go\\/exporter\\/metric:v0.57.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go@v0.57.0#exporter/metric"}]}, {"name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping", "SPDXID": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-internal-resourcemapping-467f7305ea4aa564", "versionInfo": "v0.57.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry-operations-go\\/internal\\/resourcemapping:v0.57.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry_operations_go\\/internal\\/resourcemapping:v0.57.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go@v0.57.0#internal/resourcemapping"}]}, {"name": "github.com/Intevation/gval", "SPDXID": "SPDXRef-Package-go-module-github.com-Intevation-gval-6dff92b7e5be3013", "versionInfo": "v1.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Intevation:gval:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Intevation/gval@v1.3.0"}]}, {"name": "github.com/Intevation/jsonpath", "SPDXID": "SPDXRef-Package-go-module-github.com-Intevation-jsonpath-2f65285022a20c22", "versionInfo": "v0.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Intevation:jsonpath:v0.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Intevation/jsonpath@v0.2.1"}]}, {"name": "github.com/Masterminds/goutils", "SPDXID": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-e15e95e42851d307", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:goutils_project:goutils:v1.1.1:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Masterminds/goutils@v1.1.1"}]}, {"name": "github.com/Masterminds/semver/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-a947ed0b63ec6067", "versionInfo": "v3.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Masterminds:semver\\/v3:v3.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Masterminds/semver@v3.5.0#v3"}]}, {"name": "github.com/Masterminds/sprig/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-1e21e65642531c72", "versionInfo": "v3.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Masterminds:sprig\\/v3:v3.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Masterminds/sprig@v3.3.0#v3"}]}, {"name": "github.com/OneOfOne/xxhash", "SPDXID": "SPDXRef-Package-go-module-github.com-OneOfOne-xxhash-268c1393e1d83864", "versionInfo": "v1.2.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:OneOfOne:xxhash:v1.2.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/OneOfOne/xxhash@v1.2.8"}]}, {"name": "github.com/ProtonMail/go-crypto", "SPDXID": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-83c14885dace4635", "versionInfo": "v1.4.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ProtonMail:go-crypto:v1.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ProtonMail:go_crypto:v1.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/ProtonMail/go-crypto@v1.4.1"}]}, {"name": "github.com/STARRY-S/zip", "SPDXID": "SPDXRef-Package-go-module-github.com-STARRY-S-zip-aed46e25538b7606", "versionInfo": "v0.2.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:STARRY-S:zip:v0.2.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:STARRY_S:zip:v0.2.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:STARRY:zip:v0.2.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/STARRY-S/zip@v0.2.3"}]}, {"name": "github.com/acarl005/stripansi", "SPDXID": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-e725f5d713e63e52", "versionInfo": "v0.0.0-20180116102854-5a71ef0e047d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:acarl005:stripansi:v0.0.0-20180116102854-5a71ef0e047d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/acarl005/stripansi@v0.0.0-20180116102854-5a71ef0e047d"}]}, {"name": "github.com/acobaugh/osrelease", "SPDXID": "SPDXRef-Package-go-module-github.com-acobaugh-osrelease-30a5db8da0ff56a6", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:acobaugh:osrelease:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/acobaugh/osrelease@v0.1.0"}]}, {"name": "github.com/adrg/xdg", "SPDXID": "SPDXRef-Package-go-module-github.com-adrg-xdg-e0891862c4cac5c8", "versionInfo": "v0.5.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:adrg:xdg:v0.5.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/adrg/xdg@v0.5.3"}]}, {"name": "github.com/agext/levenshtein", "SPDXID": "SPDXRef-Package-go-module-github.com-agext-levenshtein-ee8eaef48d79c008", "versionInfo": "v1.2.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:agext:levenshtein:v1.2.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/agext/levenshtein@v1.2.3"}]}, {"name": "github.com/anchore/bubbly", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-bubbly-30320a28b355d7ac", "versionInfo": "v0.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:bubbly:v0.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/bubbly@v0.2.1"}]}, {"name": "github.com/anchore/clio", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-clio-79025f8f682dd2ae", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:clio:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/clio@v0.1.1"}]}, {"name": "github.com/anchore/fangs", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-fangs-b4abd7cadb17e8ba", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:fangs:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/fangs@v0.1.1"}]}, {"name": "github.com/anchore/go-collections", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-collections-437dcbd7406868fc", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-collections:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_collections:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-collections@v0.1.1"}]}, {"name": "github.com/anchore/go-homedir", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-homedir-7131c931cb44f99e", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-homedir:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_homedir:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-homedir@v0.1.1"}]}, {"name": "github.com/anchore/go-logger", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-logger-9f48985cf195bec4", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-logger:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_logger:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-logger@v0.1.1"}]}, {"name": "github.com/anchore/go-lzo", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-lzo-ea6ddc3fd7b3d982", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-lzo:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_lzo:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-lzo@v0.1.1"}]}, {"name": "github.com/anchore/go-macholibre", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-macholibre-b396092ea43b5373", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-macholibre:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_macholibre:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-macholibre@v0.1.1"}]}, {"name": "github.com/anchore/go-rpmdb", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-rpmdb-39f192dfda34c98c", "versionInfo": "v0.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-rpmdb:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_rpmdb:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-rpmdb@v0.2.0"}]}, {"name": "github.com/anchore/go-struct-converter", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-struct-converter-eba295ed97445f65", "versionInfo": "v0.2.0-rc2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-struct-converter:v0.2.0-rc2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_struct_converter:v0.2.0-rc2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-struct-converter@v0.2.0-rc2"}]}, {"name": "github.com/anchore/go-sync", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-sync-d6e4d0bdd2979199", "versionInfo": "v0.1.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-sync:v0.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_sync:v0.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-sync@v0.1.2"}]}, {"name": "github.com/anchore/go-version", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-version-629d983eae734de2", "versionInfo": "v1.2.2-0.20210903204242-51efa5b487c4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-version:v1.2.2-0.20210903204242-51efa5b487c4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_version:v1.2.2-0.20210903204242-51efa5b487c4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-version@v1.2.2-0.20210903204242-51efa5b487c4"}]}, {"name": "github.com/anchore/grype", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "versionInfo": "v0.119.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:grype:v0.119.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/grype@v0.119.0"}]}, {"name": "github.com/anchore/packageurl-go", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-packageurl-go-7967a2607dacb794", "versionInfo": "v0.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:packageurl-go:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:packageurl_go:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/packageurl-go@v0.2.0"}]}, {"name": "github.com/anchore/stereoscope", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-stereoscope-def7ba1477147e3b", "versionInfo": "v0.3.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:stereoscope:v0.3.2:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/stereoscope@v0.3.2"}]}, {"name": "github.com/anchore/syft", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-syft-e23a7872bb863241", "versionInfo": "v1.52.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:syft:v1.52.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/syft@v1.52.0"}]}, {"name": "github.com/andybalholm/brotli", "SPDXID": "SPDXRef-Package-go-module-github.com-andybalholm-brotli-c810bc1c88e06120", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:andybalholm:brotli:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/andybalholm/brotli@v1.2.0"}]}, {"name": "github.com/apparentlymart/go-textseg/v15", "SPDXID": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-107fbe88aac1270d", "versionInfo": "v15.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apparentlymart:go-textseg\\/v15:v15.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apparentlymart:go_textseg\\/v15:v15.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/apparentlymart/go-textseg@v15.0.0#v15"}]}, {"name": "github.com/aquasecurity/go-pep440-version", "SPDXID": "SPDXRef-Package-go-module-github.com-aquasecurity-go-pep440-version-652c6488eaa1fc38", "versionInfo": "v0.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity:go-pep440-version:v0.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity:go_pep440_version:v0.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aquasecurity/go-pep440-version@v0.0.1"}]}, {"name": "github.com/aquasecurity/go-version", "SPDXID": "SPDXRef-Package-go-module-github.com-aquasecurity-go-version-981bd9d8519fadcc", "versionInfo": "v0.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity:go-version:v0.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity:go_version:v0.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aquasecurity/go-version@v0.0.1"}]}, {"name": "github.com/araddon/dateparse", "SPDXID": "SPDXRef-Package-go-module-github.com-araddon-dateparse-5ab060d70c5c231c", "versionInfo": "v0.0.0-20210429162001-6b43995a97de", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:araddon:dateparse:v0.0.0-20210429162001-6b43995a97de:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/araddon/dateparse@v0.0.0-20210429162001-6b43995a97de"}]}, {"name": "github.com/aws/aws-sdk-go-v2", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-560c186d7f368c2b", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.44.0"}]}, {"name": "github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-aws-protocol-eventstream-3ff67073b2112feb", "versionInfo": "v1.7.20", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/aws\\/protocol\\/eventstream:v1.7.20:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/aws\\/protocol\\/eventstream:v1.7.20:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.7.20#aws/protocol/eventstream"}]}, {"name": "github.com/aws/aws-sdk-go-v2/config", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-config-464f7852e61af8f5", "versionInfo": "v1.32.40", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/config:v1.32.40:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/config:v1.32.40:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.32.40#config"}]}, {"name": "github.com/aws/aws-sdk-go-v2/credentials", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-credentials-8c5ee7ff20b7d496", "versionInfo": "v1.19.39", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/credentials:v1.19.39:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/credentials:v1.19.39:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.19.39#credentials"}]}, {"name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-feature-ec2-imds-07ee7ac8d6398a86", "versionInfo": "v1.18.40", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/feature\\/ec2\\/imds:v1.18.40:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/feature\\/ec2\\/imds:v1.18.40:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.18.40#feature/ec2/imds"}]}, {"name": "github.com/aws/aws-sdk-go-v2/internal/configsources", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-configsources-8902dcc71c8471b1", "versionInfo": "v1.4.40", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/configsources:v1.4.40:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/configsources:v1.4.40:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.4.40#internal/configsources"}]}, {"name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-endpoints-v2-e38c26f21d58c139", "versionInfo": "v2.7.40", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/endpoints\\/v2:v2.7.40:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/endpoints\\/v2:v2.7.40:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v2.7.40#internal/endpoints/v2"}]}, {"name": "github.com/aws/aws-sdk-go-v2/internal/v4a", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-v4a-f3305bdd9b3db3eb", "versionInfo": "v1.4.41", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/v4a:v1.4.41:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/v4a:v1.4.41:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.4.41#internal/v4a"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-accept-encoding-dea2b9aa54559e88", "versionInfo": "v1.13.19", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/accept-encoding:v1.13.19:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/accept_encoding:v1.13.19:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.13.19#service/internal/accept-encoding"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/internal/checksum", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-checksum-b560f26fed3fc8f9", "versionInfo": "v1.10.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/checksum:v1.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/checksum:v1.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.10.0#service/internal/checksum"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-presigned-url-08ac5b71dad8bc0c", "versionInfo": "v1.13.40", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/presigned-url:v1.13.40:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/presigned_url:v1.13.40:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.13.40#service/internal/presigned-url"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/internal/s3shared", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-s3shared-20d77e6d4ffc4c03", "versionInfo": "v1.19.41", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/s3shared:v1.19.41:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/s3shared:v1.19.41:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.19.41#service/internal/s3shared"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/s3", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-s3-15c6fdf382323ef3", "versionInfo": "v1.108.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/s3:v1.108.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/s3:v1.108.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.108.0#service/s3"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/signin", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-signin-262380d7d6bdad2e", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/signin:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/signin:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.6.0#service/signin"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/sso", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sso-3c2f916221eafa4d", "versionInfo": "v1.34.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/sso:v1.34.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/sso:v1.34.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.34.0#service/sso"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/ssooidc", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-ssooidc-1f2abd7df6bc4e06", "versionInfo": "v1.39.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/ssooidc:v1.39.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/ssooidc:v1.39.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.39.0#service/ssooidc"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/sts", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sts-e17d116f1cf3ec26", "versionInfo": "v1.46.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/sts:v1.46.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/sts:v1.46.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.46.0#service/sts"}]}, {"name": "github.com/aws/smithy-go", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-smithy-go-4442bf8918f47ef1", "versionInfo": "v1.28.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:smithy-go:v1.28.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:smithy_go:v1.28.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/smithy-go@v1.28.1"}]}, {"name": "github.com/aymanbagabas/go-osc52/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-aymanbagabas-go-osc52-v2-7530bb1e5a81566e", "versionInfo": "v2.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aymanbagabas:go-osc52\\/v2:v2.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aymanbagabas:go_osc52\\/v2:v2.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aymanbagabas/go-osc52@v2.0.1#v2"}]}, {"name": "github.com/becheran/wildmatch-go", "SPDXID": "SPDXRef-Package-go-module-github.com-becheran-wildmatch-go-936f65df86b9d841", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:becheran:wildmatch-go:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:becheran:wildmatch_go:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/becheran/wildmatch-go@v1.0.0"}]}, {"name": "github.com/bgentry/go-netrc", "SPDXID": "SPDXRef-Package-go-module-github.com-bgentry-go-netrc-b88c6679fc34e461", "versionInfo": "v0.0.0-20140422174119-9fd32a8b3d3d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bgentry:go-netrc:v0.0.0-20140422174119-9fd32a8b3d3d:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bgentry:go_netrc:v0.0.0-20140422174119-9fd32a8b3d3d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bgentry/go-netrc@v0.0.0-20140422174119-9fd32a8b3d3d"}]}, {"name": "github.com/bitnami/go-version", "SPDXID": "SPDXRef-Package-go-module-github.com-bitnami-go-version-b099749efd929a31", "versionInfo": "v0.0.0-20250505154626-452e8c5ee607", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bitnami:go-version:v0.0.0-20250505154626-452e8c5ee607:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bitnami:go_version:v0.0.0-20250505154626-452e8c5ee607:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bitnami/go-version@v0.0.0-20250505154626-452e8c5ee607"}]}, {"name": "github.com/blakesmith/ar", "SPDXID": "SPDXRef-Package-go-module-github.com-blakesmith-ar-233a3a1db7514868", "versionInfo": "v0.0.0-20190502131153-809d4375e1fb", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:blakesmith:ar:v0.0.0-20190502131153-809d4375e1fb:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/blakesmith/ar@v0.0.0-20190502131153-809d4375e1fb"}]}, {"name": "github.com/bmatcuk/doublestar/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v2-80d921310727b332", "versionInfo": "v2.0.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bmatcuk:doublestar\\/v2:v2.0.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bmatcuk/doublestar@v2.0.4#v2"}]}, {"name": "github.com/bmatcuk/doublestar/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v4-a6cff570e02e0077", "versionInfo": "v4.10.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bmatcuk:doublestar\\/v4:v4.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bmatcuk/doublestar@v4.10.0#v4"}]}, {"name": "github.com/bodgit/plumbing", "SPDXID": "SPDXRef-Package-go-module-github.com-bodgit-plumbing-a8c64b07bd880952", "versionInfo": "v1.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bodgit:plumbing:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bodgit/plumbing@v1.3.0"}]}, {"name": "github.com/bodgit/sevenzip", "SPDXID": "SPDXRef-Package-go-module-github.com-bodgit-sevenzip-93f0e50a80b91215", "versionInfo": "v1.6.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bodgit:sevenzip:v1.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bodgit/sevenzip@v1.6.1"}]}, {"name": "github.com/bodgit/windows", "SPDXID": "SPDXRef-Package-go-module-github.com-bodgit-windows-ef5ac3e091576971", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bodgit:windows:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bodgit/windows@v1.0.1"}]}, {"name": "github.com/cespare/xxhash/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-b4b3e3b6bbeb38a4", "versionInfo": "v2.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cespare/xxhash@v2.3.0#v2"}]}, {"name": "github.com/charmbracelet/bubbles", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbles-ba8b0f51b2044a99", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:bubbles:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/bubbles@v1.0.0"}]}, {"name": "github.com/charmbracelet/bubbletea", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbletea-55cfdf15bb977f37", "versionInfo": "v1.3.10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:bubbletea:v1.3.10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/bubbletea@v1.3.10"}]}, {"name": "github.com/charmbracelet/colorprofile", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-colorprofile-9850cc3bd47db4ff", "versionInfo": "v0.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:colorprofile:v0.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/colorprofile@v0.4.3"}]}, {"name": "github.com/charmbracelet/harmonica", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-harmonica-36c4b0ba9a28945b", "versionInfo": "v0.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:harmonica:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/harmonica@v0.2.0"}]}, {"name": "github.com/charmbracelet/lipgloss", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-lipgloss-0033c3f04e070aef", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:lipgloss:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/lipgloss@v1.1.0"}]}, {"name": "github.com/charmbracelet/x/ansi", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-x-ansi-fcdfb91c59e5703a", "versionInfo": "v0.11.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:x\\/ansi:v0.11.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/x@v0.11.6#ansi"}]}, {"name": "github.com/charmbracelet/x/cellbuf", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-x-cellbuf-85e76e4363874688", "versionInfo": "v0.0.15", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:x\\/cellbuf:v0.0.15:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/x@v0.0.15#cellbuf"}]}, {"name": "github.com/charmbracelet/x/term", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-x-term-e7eee4c6245c1233", "versionInfo": "v0.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:x\\/term:v0.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/x@v0.2.2#term"}]}, {"name": "github.com/clipperhouse/displaywidth", "SPDXID": "SPDXRef-Package-go-module-github.com-clipperhouse-displaywidth-6214fe511830b901", "versionInfo": "v0.11.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:clipperhouse:displaywidth:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/clipperhouse/displaywidth@v0.11.0"}]}, {"name": "github.com/clipperhouse/uax29/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-0b7986138a195082", "versionInfo": "v2.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:clipperhouse:uax29\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/clipperhouse/uax29@v2.7.0#v2"}]}, {"name": "github.com/cloudflare/circl", "SPDXID": "SPDXRef-Package-go-module-github.com-cloudflare-circl-0e9dc29c10c22c09", "versionInfo": "v1.6.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cloudflare:circl:v1.6.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cloudflare/circl@v1.6.3"}]}, {"name": "github.com/cncf/xds/go", "SPDXID": "SPDXRef-Package-go-module-github.com-cncf-xds-go-ac7c52b884135991", "versionInfo": "v0.0.0-20260202195803-dba9d589def2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cncf:xds\\/go:v0.0.0-20260202195803-dba9d589def2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cncf/xds@v0.0.0-20260202195803-dba9d589def2#go"}]}, {"name": "github.com/containerd/containerd/api", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-3542e5b177dc1174", "versionInfo": "v1.11.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:containerd\\/api:v1.11.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/containerd@v1.11.1#api"}]}, {"name": "github.com/containerd/containerd/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-bef3e0743281d3f6", "versionInfo": "v2.3.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:containerd\\/v2:v2.3.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/containerd@v2.3.5#v2"}]}, {"name": "github.com/containerd/continuity", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-continuity-9373639ad05405cb", "versionInfo": "v0.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:continuity:v0.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/continuity@v0.5.0"}]}, {"name": "github.com/containerd/errdefs", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-errdefs-3f2625e2585567c0", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:errdefs:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/errdefs@v1.0.0"}]}, {"name": "github.com/containerd/errdefs/pkg", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-241973ec95f399a0", "versionInfo": "v0.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:errdefs\\/pkg:v0.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/errdefs@v0.3.0#pkg"}]}, {"name": "github.com/containerd/fifo", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-fifo-b27f86aaf92f1c6d", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:fifo:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/fifo@v1.1.0"}]}, {"name": "github.com/containerd/log", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-log-0edc98826656b188", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:log:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/log@v0.1.0"}]}, {"name": "github.com/containerd/platforms", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-platforms-93b62a2ab7e859df", "versionInfo": "v1.0.0-rc.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:platforms:v1.0.0-rc.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/platforms@v1.0.0-rc.5"}]}, {"name": "github.com/containerd/plugin", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-plugin-f42370aaaa9fb186", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:plugin:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/plugin@v1.1.0"}]}, {"name": "github.com/containerd/ttrpc", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-0e12a32f0026cb84", "versionInfo": "v1.2.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:ttrpc:v1.2.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/ttrpc@v1.2.8"}]}, {"name": "github.com/containerd/typeurl/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-fc60af9e2071027f", "versionInfo": "v2.2.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:typeurl\\/v2:v2.2.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/typeurl@v2.2.3#v2"}]}, {"name": "github.com/cyphar/filepath-securejoin", "SPDXID": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-44156b24e7680a21", "versionInfo": "v0.6.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyphar:filepath-securejoin:v0.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyphar:filepath_securejoin:v0.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cyphar/filepath-securejoin@v0.6.1"}]}, {"name": "github.com/deitch/magic", "SPDXID": "SPDXRef-Package-go-module-github.com-deitch-magic-6e619bc099d48271", "versionInfo": "v0.0.0-20240306090643-c67ab88f10cb", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:deitch:magic:v0.0.0-20240306090643-c67ab88f10cb:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/deitch/magic@v0.0.0-20240306090643-c67ab88f10cb"}]}, {"name": "github.com/diskfs/go-diskfs", "SPDXID": "SPDXRef-Package-go-module-github.com-diskfs-go-diskfs-de62268a6b8c32b2", "versionInfo": "v1.9.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:diskfs:go-diskfs:v1.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:diskfs:go_diskfs:v1.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/diskfs/go-diskfs@v1.9.4"}]}, {"name": "github.com/distribution/reference", "SPDXID": "SPDXRef-Package-go-module-github.com-distribution-reference-d115cd569f1476a6", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:distribution:reference:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/distribution/reference@v0.6.0"}]}, {"name": "github.com/docker/cli", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-cli-2940e9f8bc98a455", "versionInfo": "v29.8.0+incompatible", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:cli:v29.8.0\\+incompatible:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/cli@v29.8.0%2Bincompatible"}]}, {"name": "github.com/docker/docker", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-docker-a523354ed056bb5c", "versionInfo": "v28.5.2+incompatible", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:docker:v28.5.2\\+incompatible:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/docker@v28.5.2%2Bincompatible"}]}, {"name": "github.com/docker/docker-credential-helpers", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-7aa77e66581b858e", "versionInfo": "v0.9.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:docker-credential-helpers:v0.9.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:docker_credential_helpers:v0.9.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.5"}]}, {"name": "github.com/docker/go-connections", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-go-connections-20f80b36500118ad", "versionInfo": "v0.8.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go-connections:v0.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go_connections:v0.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/go-connections@v0.8.1"}]}, {"name": "github.com/docker/go-units", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-go-units-913e78da6bbc1250", "versionInfo": "v0.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go-units:v0.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go_units:v0.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/go-units@v0.5.0"}]}, {"name": "github.com/dsnet/compress", "SPDXID": "SPDXRef-Package-go-module-github.com-dsnet-compress-fae06b0d6f5dc64c", "versionInfo": "v0.0.2-0.20230904184137-39efe44ab707", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dsnet:compress:v0.0.2-0.20230904184137-39efe44ab707:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/dsnet/compress@v0.0.2-0.20230904184137-39efe44ab707"}]}, {"name": "github.com/dustin/go-humanize", "SPDXID": "SPDXRef-Package-go-module-github.com-dustin-go-humanize-76654d868f765bc7", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dustin:go-humanize:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dustin:go_humanize:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/dustin/go-humanize@v1.0.1"}]}, {"name": "github.com/elliotchance/phpserialize", "SPDXID": "SPDXRef-Package-go-module-github.com-elliotchance-phpserialize-58dfb0d55aecbee3", "versionInfo": "v1.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:elliotchance:phpserialize:v1.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/elliotchance/phpserialize@v1.4.0"}]}, {"name": "github.com/emirpasic/gods", "SPDXID": "SPDXRef-Package-go-module-github.com-emirpasic-gods-0db0d1c958bd8ca2", "versionInfo": "v1.18.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:emirpasic:gods:v1.18.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/emirpasic/gods@v1.18.1"}]}, {"name": "github.com/envoyproxy/go-control-plane/envoy", "SPDXID": "SPDXRef-Package-go-module-github.com-envoyproxy-go-control-plane-envoy-b086475a7700b6fd", "versionInfo": "v1.37.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:envoyproxy:go-control-plane\\/envoy:v1.37.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:envoyproxy:go_control_plane\\/envoy:v1.37.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/envoyproxy/go-control-plane@v1.37.0#envoy"}]}, {"name": "github.com/envoyproxy/protoc-gen-validate", "SPDXID": "SPDXRef-Package-go-module-github.com-envoyproxy-protoc-gen-validate-98aa640d31f6717e", "versionInfo": "v1.3.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:envoyproxy:protoc-gen-validate:v1.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:envoyproxy:protoc_gen_validate:v1.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.3.3"}]}, {"name": "github.com/facebookincubator/nvdtools", "SPDXID": "SPDXRef-Package-go-module-github.com-facebookincubator-nvdtools-4e581d0780b65cf8", "versionInfo": "v0.1.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:facebookincubator:nvdtools:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/facebookincubator/nvdtools@v0.1.5"}]}, {"name": "github.com/fatih/color", "SPDXID": "SPDXRef-Package-go-module-github.com-fatih-color-7feb4a635cba59f3", "versionInfo": "v1.19.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fatih:color:v1.19.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fatih/color@v1.19.0"}]}, {"name": "github.com/felixge/fgprof", "SPDXID": "SPDXRef-Package-go-module-github.com-felixge-fgprof-95dfcb59e676c4cc", "versionInfo": "v0.9.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:felixge:fgprof:v0.9.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/felixge/fgprof@v0.9.5"}]}, {"name": "github.com/felixge/httpsnoop", "SPDXID": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-0523a0460ca488e7", "versionInfo": "v1.0.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:felixge:httpsnoop:v1.0.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/felixge/httpsnoop@v1.0.4"}]}, {"name": "github.com/fsnotify/fsnotify", "SPDXID": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-7babc8fffd6a066d", "versionInfo": "v1.9.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fsnotify:fsnotify:v1.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fsnotify/fsnotify@v1.9.0"}]}, {"name": "github.com/gabriel-vasile/mimetype", "SPDXID": "SPDXRef-Package-go-module-github.com-gabriel-vasile-mimetype-ba707fa8ab81bbb6", "versionInfo": "v1.4.15", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gabriel-vasile:mimetype:v1.4.15:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gabriel_vasile:mimetype:v1.4.15:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gabriel:mimetype:v1.4.15:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gabriel-vasile/mimetype@v1.4.15"}]}, {"name": "github.com/github/go-spdx/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-github-go-spdx-v2-2a26b3e36c20e162", "versionInfo": "v2.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github:go-spdx\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github:go_spdx\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/github/go-spdx@v2.7.0#v2"}]}, {"name": "github.com/glebarez/go-sqlite", "SPDXID": "SPDXRef-Package-go-module-github.com-glebarez-go-sqlite-2f4c20e1963adc7d", "versionInfo": "v1.22.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:glebarez:go-sqlite:v1.22.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:glebarez:go_sqlite:v1.22.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/glebarez/go-sqlite@v1.22.0"}]}, {"name": "github.com/glebarez/sqlite", "SPDXID": "SPDXRef-Package-go-module-github.com-glebarez-sqlite-9cde7301346af6d6", "versionInfo": "v1.11.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:glebarez:sqlite:v1.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/glebarez/sqlite@v1.11.0"}]}, {"name": "github.com/go-git/gcfg", "SPDXID": "SPDXRef-Package-go-module-github.com-go-git-gcfg-4fcf321caaa7171f", "versionInfo": "v1.5.1-0.20230307220236-3a3c6141e376", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-git:gcfg:v1.5.1-0.20230307220236-3a3c6141e376:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_git:gcfg:v1.5.1-0.20230307220236-3a3c6141e376:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:gcfg:v1.5.1-0.20230307220236-3a3c6141e376:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-git/gcfg@v1.5.1-0.20230307220236-3a3c6141e376"}]}, {"name": "github.com/go-git/go-billy/v5", "SPDXID": "SPDXRef-Package-go-module-github.com-go-git-go-billy-v5-ffc8a700d518bd7f", "versionInfo": "v5.9.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-git:go-billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-git:go_billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_git:go-billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_git:go_billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-git/go-billy@v5.9.1#v5"}]}, {"name": "github.com/go-git/go-git/v5", "SPDXID": "SPDXRef-Package-go-module-github.com-go-git-go-git-v5-cb7be3d9e525bd44", "versionInfo": "v5.19.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-git:go-git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-git:go_git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_git:go-git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_git:go_git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-git/go-git@v5.19.2#v5"}]}, {"name": "github.com/go-jose/go-jose/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-db0384e876064a63", "versionInfo": "v4.1.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-jose/go-jose@v4.1.4#v4"}]}, {"name": "github.com/go-logr/logr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-logr-a122363e32d429b7", "versionInfo": "v1.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:logr:v1.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:logr:v1.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:logr:v1.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/logr@v1.4.3"}]}, {"name": "github.com/go-logr/stdr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-stdr-529747e4d6102b32", "versionInfo": "v1.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/stdr@v1.2.2"}]}, {"name": "github.com/go-restruct/restruct", "SPDXID": "SPDXRef-Package-go-module-github.com-go-restruct-restruct-2564a4f65057068e", "versionInfo": "v1.2.0-alpha", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-restruct:restruct:v1.2.0-alpha:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_restruct:restruct:v1.2.0-alpha:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:restruct:v1.2.0-alpha:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-restruct/restruct@v1.2.0-alpha"}]}, {"name": "github.com/go-viper/mapstructure/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-d0adf17e3b3e20b7", "versionInfo": "v2.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-viper/mapstructure@v2.5.0#v2"}]}, {"name": "github.com/goccy/go-yaml", "SPDXID": "SPDXRef-Package-go-module-github.com-goccy-go-yaml-e274fe478c1781d0", "versionInfo": "v1.19.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:goccy:go-yaml:v1.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:goccy:go_yaml:v1.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/goccy/go-yaml@v1.19.2"}]}, {"name": "github.com/gocsaf/csaf/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-gocsaf-csaf-v3-217662299146216c", "versionInfo": "v3.5.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gocsaf:csaf\\/v3:v3.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gocsaf/csaf@v3.5.1#v3"}]}, {"name": "github.com/gogo/protobuf", "SPDXID": "SPDXRef-Package-go-module-github.com-gogo-protobuf-6ea233073fd787cc", "versionInfo": "v1.3.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gogo:protobuf:v1.3.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gogo/protobuf@v1.3.2"}]}, {"name": "github.com/gohugoio/hashstructure", "SPDXID": "SPDXRef-Package-go-module-github.com-gohugoio-hashstructure-d0ab6c7c1e979ff7", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gohugoio:hashstructure:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gohugoio/hashstructure@v0.6.0"}]}, {"name": "github.com/golang/groupcache", "SPDXID": "SPDXRef-Package-go-module-github.com-golang-groupcache-fcaafcc5bbb94cad", "versionInfo": "v0.0.0-20241129210726-2c02b8208cf8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:groupcache:v0.0.0-20241129210726-2c02b8208cf8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/golang/groupcache@v0.0.0-20241129210726-2c02b8208cf8"}]}, {"name": "github.com/google/go-cmp", "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-cmp-bd8f7c7d9ba26ba1", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go-cmp:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go_cmp:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/go-cmp@v0.7.0"}]}, {"name": "github.com/google/go-containerregistry", "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-62f38c3ca70a22bf", "versionInfo": "v0.22.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go-containerregistry:v0.22.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go_containerregistry:v0.22.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/go-containerregistry@v0.22.1"}]}, {"name": "github.com/google/licensecheck", "SPDXID": "SPDXRef-Package-go-module-github.com-google-licensecheck-ad5dc018457a8915", "versionInfo": "v0.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:licensecheck:v0.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/licensecheck@v0.3.1"}]}, {"name": "github.com/google/pprof", "SPDXID": "SPDXRef-Package-go-module-github.com-google-pprof-95e78ee30268b524", "versionInfo": "v0.0.0-20260802141513-ef3492d7dac3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:pprof:v0.0.0-20260802141513-ef3492d7dac3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/pprof@v0.0.0-20260802141513-ef3492d7dac3"}]}, {"name": "github.com/google/s2a-go", "SPDXID": "SPDXRef-Package-go-module-github.com-google-s2a-go-388c921bac03d721", "versionInfo": "v0.1.9", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:s2a-go:v0.1.9:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:s2a_go:v0.1.9:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/s2a-go@v0.1.9"}]}, {"name": "github.com/google/uuid", "SPDXID": "SPDXRef-Package-go-module-github.com-google-uuid-a30e321677d3fd85", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/uuid@v1.6.0"}]}, {"name": "github.com/googleapis/enterprise-certificate-proxy", "SPDXID": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-ac78ba7c2e106c55", "versionInfo": "v0.3.20", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:enterprise-certificate-proxy:v0.3.20:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:enterprise_certificate_proxy:v0.3.20:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.20"}]}, {"name": "github.com/googleapis/gax-go/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-6f148ad76a49d8ef", "versionInfo": "v2.24.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:gax-go\\/v2:v2.24.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:gax_go\\/v2:v2.24.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/googleapis/gax-go@v2.24.0#v2"}]}, {"name": "github.com/gookit/color", "SPDXID": "SPDXRef-Package-go-module-github.com-gookit-color-523d4334c319f84c", "versionInfo": "v1.6.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gookit:color:v1.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gookit/color@v1.6.1"}]}, {"name": "github.com/gpustack/gguf-parser-go", "SPDXID": "SPDXRef-Package-go-module-github.com-gpustack-gguf-parser-go-e52630e092fbf180", "versionInfo": "v0.26.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gpustack:gguf-parser-go:v0.26.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gpustack:gguf_parser_go:v0.26.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gpustack/gguf-parser-go@v0.26.3"}]}, {"name": "github.com/hako/durafmt", "SPDXID": "SPDXRef-Package-go-module-github.com-hako-durafmt-9d5b1c25f93d3a84", "versionInfo": "v0.0.0-20210608085754-5c1018a4e16b", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hako:durafmt:v0.0.0-20210608085754-5c1018a4e16b:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hako/durafmt@v0.0.0-20210608085754-5c1018a4e16b"}]}, {"name": "github.com/hashicorp/aws-sdk-go-base/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-aws-sdk-go-base-v2-a6658289be6d149b", "versionInfo": "v2.0.0-beta.74", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:aws-sdk-go-base\\/v2:v2.0.0-beta.74:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:aws_sdk_go_base\\/v2:v2.0.0-beta.74:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/aws-sdk-go-base@v2.0.0-beta.74#v2"}]}, {"name": "github.com/hashicorp/errwrap", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-4235cfcfd78e5b24", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:errwrap:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0"}]}, {"name": "github.com/hashicorp/go-cleanhttp", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-429f93f83be135dd", "versionInfo": "v0.5.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-cleanhttp:v0.5.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_cleanhttp:v0.5.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2"}]}, {"name": "github.com/hashicorp/go-getter", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-getter-0114dbe1beb69223", "versionInfo": "v1.8.9", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-getter:v1.8.9:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_getter:v1.8.9:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-getter@v1.8.9"}]}, {"name": "github.com/hashicorp/go-multierror", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-20fe82145f89ff3e", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-multierror:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_multierror:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1"}]}, {"name": "github.com/hashicorp/go-version", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-a3a35df68b4ad7fb", "versionInfo": "v1.9.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-version:v1.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_version:v1.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-version@v1.9.0"}]}, {"name": "github.com/hashicorp/golang-lru/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-golang-lru-v2-0f672f8f774746b2", "versionInfo": "v2.0.7", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:golang-lru\\/v2:v2.0.7:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:golang_lru\\/v2:v2.0.7:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/golang-lru@v2.0.7#v2"}]}, {"name": "github.com/hashicorp/hcl/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-7e176c7d27f1ffcc", "versionInfo": "v2.24.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:hcl\\/v2:v2.24.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/hcl@v2.24.0#v2"}]}, {"name": "github.com/henvic/httpretty", "SPDXID": "SPDXRef-Package-go-module-github.com-henvic-httpretty-3dcb72895bacb234", "versionInfo": "v0.1.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:henvic:httpretty:v0.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/henvic/httpretty@v0.1.4"}]}, {"name": "github.com/huandu/xstrings", "SPDXID": "SPDXRef-Package-go-module-github.com-huandu-xstrings-2757d0137f8f3120", "versionInfo": "v1.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:huandu:xstrings:v1.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/huandu/xstrings@v1.5.0"}]}, {"name": "github.com/iancoleman/strcase", "SPDXID": "SPDXRef-Package-go-module-github.com-iancoleman-strcase-79f34bf20e302fa8", "versionInfo": "v0.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:iancoleman:strcase:v0.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/iancoleman/strcase@v0.3.0"}]}, {"name": "github.com/in-toto/attestation", "SPDXID": "SPDXRef-Package-go-module-github.com-in-toto-attestation-603be52049552c98", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:in-toto:attestation:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:in_toto:attestation:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:in:attestation:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/in-toto/attestation@v1.2.0"}]}, {"name": "github.com/jbenet/go-context", "SPDXID": "SPDXRef-Package-go-module-github.com-jbenet-go-context-367dfb65da7dde90", "versionInfo": "v0.0.0-20150711004518-d14ea06fba99", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jbenet:go-context:v0.0.0-20150711004518-d14ea06fba99:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jbenet:go_context:v0.0.0-20150711004518-d14ea06fba99:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jbenet/go-context@v0.0.0-20150711004518-d14ea06fba99"}]}, {"name": "github.com/jinzhu/copier", "SPDXID": "SPDXRef-Package-go-module-github.com-jinzhu-copier-7647ab69f990ae85", "versionInfo": "v0.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jinzhu:copier:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jinzhu/copier@v0.4.0"}]}, {"name": "github.com/jinzhu/inflection", "SPDXID": "SPDXRef-Package-go-module-github.com-jinzhu-inflection-adf8344b986f214d", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jinzhu:inflection:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jinzhu/inflection@v1.0.0"}]}, {"name": "github.com/jinzhu/now", "SPDXID": "SPDXRef-Package-go-module-github.com-jinzhu-now-4e11d6dcf148f1c5", "versionInfo": "v1.1.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jinzhu:now:v1.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jinzhu/now@v1.1.5"}]}, {"name": "github.com/json-iterator/go", "SPDXID": "SPDXRef-Package-go-module-github.com-json-iterator-go-fa06175dc23ac437", "versionInfo": "v1.1.12", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json-iterator:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json_iterator:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/json-iterator/go@v1.1.12"}]}, {"name": "github.com/kastenhq/goversion", "SPDXID": "SPDXRef-Package-go-module-github.com-kastenhq-goversion-ae521c778a1debfa", "versionInfo": "v0.0.0-20230811215019-93b2f8823953", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:kastenhq:goversion:v0.0.0-20230811215019-93b2f8823953:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/kastenhq/goversion@v0.0.0-20230811215019-93b2f8823953"}]}, {"name": "github.com/kevinburke/ssh_config", "SPDXID": "SPDXRef-Package-go-module-github.com-kevinburke-ssh-config-6d6846cac292b744", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:kevinburke:ssh-config:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:kevinburke:ssh_config:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/kevinburke/ssh_config@v1.2.0"}]}, {"name": "github.com/klauspost/compress", "SPDXID": "SPDXRef-Package-go-module-github.com-klauspost-compress-a04b227c79d591b5", "versionInfo": "v1.20.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:klauspost:compress:v1.20.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/klauspost/compress@v1.20.0"}]}, {"name": "github.com/klauspost/pgzip", "SPDXID": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-318c5f17aafb0c35", "versionInfo": "v1.2.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:klauspost:pgzip:v1.2.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/klauspost/pgzip@v1.2.6"}]}, {"name": "github.com/knqyf263/go-apk-version", "SPDXID": "SPDXRef-Package-go-module-github.com-knqyf263-go-apk-version-54e2ae76ad3f158e", "versionInfo": "v0.0.0-20200609155635-041fdbb8563f", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:knqyf263:go-apk-version:v0.0.0-20200609155635-041fdbb8563f:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:knqyf263:go_apk_version:v0.0.0-20200609155635-041fdbb8563f:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/knqyf263/go-apk-version@v0.0.0-20200609155635-041fdbb8563f"}]}, {"name": "github.com/knqyf263/go-deb-version", "SPDXID": "SPDXRef-Package-go-module-github.com-knqyf263-go-deb-version-2b6ebcdc95c3e889", "versionInfo": "v0.0.0-20241115132648-6f4aee6ccd23", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:knqyf263:go-deb-version:v0.0.0-20241115132648-6f4aee6ccd23:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:knqyf263:go_deb_version:v0.0.0-20241115132648-6f4aee6ccd23:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/knqyf263/go-deb-version@v0.0.0-20241115132648-6f4aee6ccd23"}]}, {"name": "github.com/lucasb-eyer/go-colorful", "SPDXID": "SPDXRef-Package-go-module-github.com-lucasb-eyer-go-colorful-701de8a04f672eb0", "versionInfo": "v1.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb-eyer:go-colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb-eyer:go_colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb_eyer:go-colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb_eyer:go_colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb:go-colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb:go_colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/lucasb-eyer/go-colorful@v1.3.0"}]}, {"name": "github.com/masahiro331/go-mvn-version", "SPDXID": "SPDXRef-Package-go-module-github.com-masahiro331-go-mvn-version-10529021c13e90a0", "versionInfo": "v0.0.0-20250131095131-f4974fa13b8a", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:masahiro331:go-mvn-version:v0.0.0-20250131095131-f4974fa13b8a:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:masahiro331:go_mvn_version:v0.0.0-20250131095131-f4974fa13b8a:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/masahiro331/go-mvn-version@v0.0.0-20250131095131-f4974fa13b8a"}]}, {"name": "github.com/mattn/go-colorable", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-fd18afd155427906", "versionInfo": "v0.1.14", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-colorable:v0.1.14:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_colorable:v0.1.14:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-colorable@v0.1.14"}]}, {"name": "github.com/mattn/go-isatty", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-0efada52533c3099", "versionInfo": "v0.0.24", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-isatty:v0.0.24:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_isatty:v0.0.24:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-isatty@v0.0.24"}]}, {"name": "github.com/mattn/go-runewidth", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-342ae09cb029fd51", "versionInfo": "v0.0.21", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-runewidth:v0.0.21:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_runewidth:v0.0.21:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-runewidth@v0.0.21"}]}, {"name": "github.com/mgutz/ansi", "SPDXID": "SPDXRef-Package-go-module-github.com-mgutz-ansi-0920edf93afa5844", "versionInfo": "v0.0.0-20200706080929-d51e80ef957d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mgutz:ansi:v0.0.0-20200706080929-d51e80ef957d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mgutz/ansi@v0.0.0-20200706080929-d51e80ef957d"}]}, {"name": "github.com/mholt/archives", "SPDXID": "SPDXRef-Package-go-module-github.com-mholt-archives-fd1638e7958a61c3", "versionInfo": "v0.1.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mholt:archives:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mholt/archives@v0.1.5"}]}, {"name": "github.com/mikelolasagasti/xz", "SPDXID": "SPDXRef-Package-go-module-github.com-mikelolasagasti-xz-b2db22f7a73dc8c3", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mikelolasagasti:xz:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mikelolasagasti/xz@v1.0.1"}]}, {"name": "github.com/minio/minlz", "SPDXID": "SPDXRef-Package-go-module-github.com-minio-minlz-93263cefa03934ed", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:minio:minlz:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/minio/minlz@v1.0.1"}]}, {"name": "github.com/mitchellh/copystructure", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-4215e393881dda04", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:copystructure:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/copystructure@v1.2.0"}]}, {"name": "github.com/mitchellh/go-homedir", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-go-homedir-3c0b5fbaf936edee", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:go-homedir:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:go_homedir:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0"}]}, {"name": "github.com/mitchellh/go-wordwrap", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-b2bc836f9bcb390d", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:go-wordwrap:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:go_wordwrap:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1"}]}, {"name": "github.com/mitchellh/reflectwalk", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-d842b7c69cf11184", "versionInfo": "v1.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:reflectwalk:v1.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/reflectwalk@v1.0.2"}]}, {"name": "github.com/moby/docker-image-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-1f3c8d88a0047d8f", "versionInfo": "v1.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:docker-image-spec:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:docker_image_spec:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/docker-image-spec@v1.3.1"}]}, {"name": "github.com/moby/locker", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-locker-e198aa2c026bb124", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:locker:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/locker@v1.0.1"}]}, {"name": "github.com/moby/moby/api", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-moby-api-5204d657c6fa23cb", "versionInfo": "v1.56.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:moby\\/api:v1.56.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/moby@v1.56.0#api"}]}, {"name": "github.com/moby/moby/client", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-moby-client-c2a98f8372d21854", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:moby\\/client:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/moby@v0.6.0#client"}]}, {"name": "github.com/moby/sys/mountinfo", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-7f112aee95e2ecb5", "versionInfo": "v0.7.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/mountinfo:v0.7.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.7.2#mountinfo"}]}, {"name": "github.com/moby/sys/signal", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-signal-5cda820b30905462", "versionInfo": "v0.7.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/signal:v0.7.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.7.1#signal"}]}, {"name": "github.com/moby/sys/user", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-user-886d21bd75e881b2", "versionInfo": "v0.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/user:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.4.0#user"}]}, {"name": "github.com/moby/sys/userns", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-userns-f4b65e737d877d28", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/userns:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.1.0#userns"}]}, {"name": "github.com/modern-go/concurrent", "SPDXID": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-c0987934af1dede5", "versionInfo": "v0.0.0-20180306012644-bacd9c7ef1dd", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern-go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern_go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd"}]}, {"name": "github.com/modern-go/reflect2", "SPDXID": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-43ef29c658c306bd", "versionInfo": "v1.0.3-0.20250322232337-35a7c28c31ee", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern-go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern_go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee"}]}, {"name": "github.com/muesli/ansi", "SPDXID": "SPDXRef-Package-go-module-github.com-muesli-ansi-830a7faa4aa432fb", "versionInfo": "v0.0.0-20230316100256-276c6243b2f6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:muesli:ansi:v0.0.0-20230316100256-276c6243b2f6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/muesli/ansi@v0.0.0-20230316100256-276c6243b2f6"}]}, {"name": "github.com/muesli/cancelreader", "SPDXID": "SPDXRef-Package-go-module-github.com-muesli-cancelreader-83da796cfea83aca", "versionInfo": "v0.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:muesli:cancelreader:v0.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/muesli/cancelreader@v0.2.2"}]}, {"name": "github.com/muesli/termenv", "SPDXID": "SPDXRef-Package-go-module-github.com-muesli-termenv-ede4acf0f5336f48", "versionInfo": "v0.16.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:muesli:termenv:v0.16.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/muesli/termenv@v0.16.0"}]}, {"name": "github.com/nix-community/go-nix", "SPDXID": "SPDXRef-Package-go-module-github.com-nix-community-go-nix-b2fa38e2a17816eb", "versionInfo": "v0.0.0-20250101154619-4bdde671e0a1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix-community:go-nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix-community:go_nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix_community:go-nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix_community:go_nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix:go-nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix:go_nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/nix-community/go-nix@v0.0.0-20250101154619-4bdde671e0a1"}]}, {"name": "github.com/nwaples/rardecode/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-nwaples-rardecode-v2-d4d6c0de5c012f4e", "versionInfo": "v2.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nwaples:rardecode\\/v2:v2.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/nwaples/rardecode@v2.2.0#v2"}]}, {"name": "github.com/olekukonko/cat", "SPDXID": "SPDXRef-Package-go-module-github.com-olekukonko-cat-c0dfb98af08588f6", "versionInfo": "v0.0.0-20250911104152-50322a0618f6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:olekukonko:cat:v0.0.0-20250911104152-50322a0618f6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/olekukonko/cat@v0.0.0-20250911104152-50322a0618f6"}]}, {"name": "github.com/olekukonko/errors", "SPDXID": "SPDXRef-Package-go-module-github.com-olekukonko-errors-c5d2d53cb0eb4360", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:olekukonko:errors:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/olekukonko/errors@v1.2.0"}]}, {"name": "github.com/olekukonko/ll", "SPDXID": "SPDXRef-Package-go-module-github.com-olekukonko-ll-976b0d2881d1ca97", "versionInfo": "v0.1.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:olekukonko:ll:v0.1.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/olekukonko/ll@v0.1.6"}]}, {"name": "github.com/olekukonko/tablewriter", "SPDXID": "SPDXRef-Package-go-module-github.com-olekukonko-tablewriter-6e7d3e060383c38f", "versionInfo": "v1.1.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:olekukonko:tablewriter:v1.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/olekukonko/tablewriter@v1.1.4"}]}, {"name": "github.com/opencontainers/go-digest", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-c9af4ce3fdd649cf", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:go-digest:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:go_digest:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0"}]}, {"name": "github.com/opencontainers/image-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-80e4443835858b9d", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:image-spec:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:image_spec:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1"}]}, {"name": "github.com/opencontainers/runtime-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-e93f6e072d3eb108", "versionInfo": "v1.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime-spec:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime_spec:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/runtime-spec@v1.3.0"}]}, {"name": "github.com/openvex/go-vex", "SPDXID": "SPDXRef-Package-go-module-github.com-openvex-go-vex-b20fbf004b07e8d2", "versionInfo": "v0.2.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:openvex:go-vex:v0.2.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:openvex:go_vex:v0.2.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/openvex/go-vex@v0.2.8"}]}, {"name": "github.com/owenrumney/go-sarif", "SPDXID": "SPDXRef-Package-go-module-github.com-owenrumney-go-sarif-d1f5bd5b7286bb87", "versionInfo": "v1.1.2-0.20231003122901-1000f5e05554", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:owenrumney:go-sarif:v1.1.2-0.20231003122901-1000f5e05554:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:owenrumney:go_sarif:v1.1.2-0.20231003122901-1000f5e05554:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/owenrumney/go-sarif@v1.1.2-0.20231003122901-1000f5e05554"}]}, {"name": "github.com/package-url/packageurl-go", "SPDXID": "SPDXRef-Package-go-module-github.com-package-url-packageurl-go-73f43f2f13b55a04", "versionInfo": "v0.1.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:package-url:packageurl-go:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:package-url:packageurl_go:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:package_url:packageurl-go:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:package_url:packageurl_go:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:package:packageurl-go:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:package:packageurl_go:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/package-url/packageurl-go@v0.1.5"}]}, {"name": "github.com/pandatix/go-cvss", "SPDXID": "SPDXRef-Package-go-module-github.com-pandatix-go-cvss-e535655f18a0daf3", "versionInfo": "v0.6.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pandatix:go-cvss:v0.6.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pandatix:go_cvss:v0.6.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pandatix/go-cvss@v0.6.4"}]}, {"name": "github.com/pborman/indent", "SPDXID": "SPDXRef-Package-go-module-github.com-pborman-indent-36075ba7843ffa88", "versionInfo": "v1.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pborman:indent:v1.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pborman/indent@v1.2.1"}]}, {"name": "github.com/pelletier/go-toml", "SPDXID": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-b228c33bafd8a571", "versionInfo": "v1.9.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pelletier:go-toml:v1.9.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pelletier:go_toml:v1.9.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pelletier/go-toml@v1.9.5"}]}, {"name": "github.com/pelletier/go-toml/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-66c4de9fe7df7c50", "versionInfo": "v2.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pelletier:go-toml\\/v2:v2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pelletier:go_toml\\/v2:v2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pelletier/go-toml@v2.4.3#v2"}]}, {"name": "github.com/pierrec/lz4/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-2c5075e93967a01c", "versionInfo": "v4.1.26", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pierrec:lz4\\/v4:v4.1.26:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pierrec/lz4@v4.1.26#v4"}]}, {"name": "github.com/piprate/json-gold", "SPDXID": "SPDXRef-Package-go-module-github.com-piprate-json-gold-c9490b0aa636ba8f", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:piprate:json-gold:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:piprate:json_gold:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/piprate/json-gold@v0.7.0"}]}, {"name": "github.com/pjbgf/sha1cd", "SPDXID": "SPDXRef-Package-go-module-github.com-pjbgf-sha1cd-33ee9fa15c85467a", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pjbgf:sha1cd:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pjbgf/sha1cd@v0.6.0"}]}, {"name": "github.com/pkg/errors", "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-errors-de0976b78aa42f83", "versionInfo": "v0.9.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pkg/errors@v0.9.1"}]}, {"name": "github.com/pkg/profile", "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-profile-f476746390bae2a1", "versionInfo": "v1.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pkg:profile:v1.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pkg/profile@v1.7.0"}]}, {"name": "github.com/pkg/xattr", "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-xattr-fda4ce011c4a67f3", "versionInfo": "v0.4.12", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pkg:xattr:v0.4.12:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pkg/xattr@v0.4.12"}]}, {"name": "github.com/pquerna/cachecontrol", "SPDXID": "SPDXRef-Package-go-module-github.com-pquerna-cachecontrol-645cbe4288301f73", "versionInfo": "v0.0.0-20180517163645-1555304b9b35", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pquerna:cachecontrol:v0.0.0-20180517163645-1555304b9b35:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pquerna/cachecontrol@v0.0.0-20180517163645-1555304b9b35"}]}, {"name": "github.com/remyoudompheng/bigfft", "SPDXID": "SPDXRef-Package-go-module-github.com-remyoudompheng-bigfft-b9b6305b2aded0ec", "versionInfo": "v0.0.0-20230129092748-24d4a6f8daec", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:remyoudompheng:bigfft:v0.0.0-20230129092748-24d4a6f8daec:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/remyoudompheng/bigfft@v0.0.0-20230129092748-24d4a6f8daec"}]}, {"name": "github.com/rivo/uniseg", "SPDXID": "SPDXRef-Package-go-module-github.com-rivo-uniseg-ab5a832b97aee5be", "versionInfo": "v0.4.7", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rivo:uniseg:v0.4.7:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/rivo/uniseg@v0.4.7"}]}, {"name": "github.com/rust-secure-code/go-rustaudit", "SPDXID": "SPDXRef-Package-go-module-github.com-rust-secure-code-go-rustaudit-5211330e6a0a7ddc", "versionInfo": "v0.0.0-20250226111315-e20ec32e963c", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust-secure-code:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust-secure-code:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust_secure_code:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust_secure_code:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust-secure:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust-secure:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust_secure:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust_secure:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/rust-secure-code/go-rustaudit@v0.0.0-20250226111315-e20ec32e963c"}]}, {"name": "github.com/sagikazarmark/locafero", "SPDXID": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-73865f4d359fe7ed", "versionInfo": "v0.11.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sagikazarmark:locafero:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sagikazarmark/locafero@v0.11.0"}]}, {"name": "github.com/saintfish/chardet", "SPDXID": "SPDXRef-Package-go-module-github.com-saintfish-chardet-9fbb3f4db7a935a1", "versionInfo": "v0.0.0-20230101081208-5e3ef4b5456d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:saintfish:chardet:v0.0.0-20230101081208-5e3ef4b5456d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/saintfish/chardet@v0.0.0-20230101081208-5e3ef4b5456d"}]}, {"name": "github.com/santhosh-tekuri/jsonschema/v6", "SPDXID": "SPDXRef-Package-go-module-github.com-santhosh-tekuri-jsonschema-v6-2238944e2a6be877", "versionInfo": "v6.0.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:santhosh-tekuri:jsonschema\\/v6:v6.0.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:santhosh_tekuri:jsonschema\\/v6:v6.0.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:santhosh:jsonschema\\/v6:v6.0.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/santhosh-tekuri/jsonschema@v6.0.3#v6"}]}, {"name": "github.com/sassoftware/go-rpmutils", "SPDXID": "SPDXRef-Package-go-module-github.com-sassoftware-go-rpmutils-ceec0eaa75c074b5", "versionInfo": "v0.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sassoftware:go-rpmutils:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sassoftware:go_rpmutils:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sassoftware/go-rpmutils@v0.4.0"}]}, {"name": "github.com/scylladb/go-set", "SPDXID": "SPDXRef-Package-go-module-github.com-scylladb-go-set-7e977b8d9181af46", "versionInfo": "v1.0.3-0.20200225121959-cc7b2070d91e", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:scylladb:go-set:v1.0.3-0.20200225121959-cc7b2070d91e:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:scylladb:go_set:v1.0.3-0.20200225121959-cc7b2070d91e:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/scylladb/go-set@v1.0.3-0.20200225121959-cc7b2070d91e"}]}, {"name": "github.com/sergi/go-diff", "SPDXID": "SPDXRef-Package-go-module-github.com-sergi-go-diff-b5c5dc83557bdda9", "versionInfo": "v1.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sergi:go-diff:v1.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sergi:go_diff:v1.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sergi/go-diff@v1.4.0"}]}, {"name": "github.com/shopspring/decimal", "SPDXID": "SPDXRef-Package-go-module-github.com-shopspring-decimal-290cd270c04c031c", "versionInfo": "v1.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:shopspring:decimal:v1.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/shopspring/decimal@v1.4.0"}]}, {"name": "github.com/sirupsen/logrus", "SPDXID": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-233157a6dc0b989f", "versionInfo": "v1.9.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sirupsen:logrus:v1.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sirupsen/logrus@v1.9.4"}]}, {"name": "github.com/skeema/knownhosts", "SPDXID": "SPDXRef-Package-go-module-github.com-skeema-knownhosts-b571e7b7b5403b89", "versionInfo": "v1.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:skeema:knownhosts:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/skeema/knownhosts@v1.3.1"}]}, {"name": "github.com/smallnest/ringbuffer", "SPDXID": "SPDXRef-Package-go-module-github.com-smallnest-ringbuffer-ca40aa2c7b5f6da4", "versionInfo": "v0.0.0-20241116012123-461381446e3d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:smallnest:ringbuffer:v0.0.0-20241116012123-461381446e3d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/smallnest/ringbuffer@v0.0.0-20241116012123-461381446e3d"}]}, {"name": "github.com/sorairolake/lzip-go", "SPDXID": "SPDXRef-Package-go-module-github.com-sorairolake-lzip-go-baddd917eff58f76", "versionInfo": "v0.3.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sorairolake:lzip-go:v0.3.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sorairolake:lzip_go:v0.3.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sorairolake/lzip-go@v0.3.8"}]}, {"name": "github.com/sourcegraph/conc", "SPDXID": "SPDXRef-Package-go-module-github.com-sourcegraph-conc-9257804278d56b66", "versionInfo": "v0.3.1-0.20240121214520-5f936abd7ae8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sourcegraph:conc:v0.3.1-0.20240121214520-5f936abd7ae8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sourcegraph/conc@v0.3.1-0.20240121214520-5f936abd7ae8"}]}, {"name": "github.com/spdx/gordf", "SPDXID": "SPDXRef-Package-go-module-github.com-spdx-gordf-bc640265fcc4acc5", "versionInfo": "v0.0.0-20250128162952-000978ccd6fb", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spdx:gordf:v0.0.0-20250128162952-000978ccd6fb:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spdx/gordf@v0.0.0-20250128162952-000978ccd6fb"}]}, {"name": "github.com/spdx/tools-golang", "SPDXID": "SPDXRef-Package-go-module-github.com-spdx-tools-golang-7857925cb400e0d0", "versionInfo": "v0.6.0-rc4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spdx:tools-golang:v0.6.0-rc4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spdx:tools_golang:v0.6.0-rc4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spdx/tools-golang@v0.6.0-rc4"}]}, {"name": "github.com/spf13/afero", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-afero-9c6b6cdd51c4784e", "versionInfo": "v1.15.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:afero:v1.15.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/afero@v1.15.0"}]}, {"name": "github.com/spf13/cast", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-cast-ecdb441b7a6a5574", "versionInfo": "v1.10.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:cast:v1.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/cast@v1.10.0"}]}, {"name": "github.com/spf13/cobra", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-cobra-4fde74ccf0d4998c", "versionInfo": "v1.10.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:cobra:v1.10.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/cobra@v1.10.2"}]}, {"name": "github.com/spf13/pflag", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-pflag-40b1f287cd57a5c7", "versionInfo": "v1.0.10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:pflag:v1.0.10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/pflag@v1.0.10"}]}, {"name": "github.com/spf13/viper", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-viper-0f37bfc7b2d96566", "versionInfo": "v1.21.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:viper:v1.21.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/viper@v1.21.0"}]}, {"name": "github.com/spiffe/go-spiffe/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-spiffe-go-spiffe-v2-03c68604f57b4741", "versionInfo": "v2.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spiffe:go-spiffe\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spiffe:go_spiffe\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spiffe/go-spiffe@v2.7.0#v2"}]}, {"name": "github.com/subosito/gotenv", "SPDXID": "SPDXRef-Package-go-module-github.com-subosito-gotenv-3cda5ee5250cabee", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:subosito:gotenv:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/subosito/gotenv@v1.6.0"}]}, {"name": "github.com/sylabs/sif/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-ba7789f8e63b103c", "versionInfo": "v2.24.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sylabs:sif\\/v2:v2.24.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sylabs/sif@v2.24.1#v2"}]}, {"name": "github.com/sylabs/squashfs", "SPDXID": "SPDXRef-Package-go-module-github.com-sylabs-squashfs-ae5c2086bd91b11b", "versionInfo": "v1.0.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sylabs:squashfs:v1.0.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sylabs/squashfs@v1.0.6"}]}, {"name": "github.com/tailscale/hujson", "SPDXID": "SPDXRef-Package-go-module-github.com-tailscale-hujson-ffd87a9c5e557fbc", "versionInfo": "v0.0.0-20260302212456-ecc657c15afd", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tailscale:hujson:v0.0.0-20260302212456-ecc657c15afd:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/tailscale/hujson@v0.0.0-20260302212456-ecc657c15afd"}]}, {"name": "github.com/therootcompany/xz", "SPDXID": "SPDXRef-Package-go-module-github.com-therootcompany-xz-dea12b3bbd27596b", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:therootcompany:xz:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/therootcompany/xz@v1.0.1"}]}, {"name": "github.com/ulikunitz/xz", "SPDXID": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-979c3c1582da233b", "versionInfo": "v0.5.16", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ulikunitz:xz:v0.5.16:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/ulikunitz/xz@v0.5.16"}]}, {"name": "github.com/vbatts/go-mtree", "SPDXID": "SPDXRef-Package-go-module-github.com-vbatts-go-mtree-ee622f7616eb79e1", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbatts:go-mtree:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbatts:go_mtree:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vbatts/go-mtree@v0.7.0"}]}, {"name": "github.com/vifraa/gopom", "SPDXID": "SPDXRef-Package-go-module-github.com-vifraa-gopom-90ccd904c2408318", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vifraa:gopom:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vifraa/gopom@v1.0.0"}]}, {"name": "github.com/wagoodman/go-partybus", "SPDXID": "SPDXRef-Package-go-module-github.com-wagoodman-go-partybus-f0fc2150eea547a1", "versionInfo": "v0.0.0-20230516145632-8ccac152c651", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:wagoodman:go-partybus:v0.0.0-20230516145632-8ccac152c651:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:wagoodman:go_partybus:v0.0.0-20230516145632-8ccac152c651:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/wagoodman/go-partybus@v0.0.0-20230516145632-8ccac152c651"}]}, {"name": "github.com/wagoodman/go-presenter", "SPDXID": "SPDXRef-Package-go-module-github.com-wagoodman-go-presenter-ec87d7c3c24877e6", "versionInfo": "v0.0.0-20211015174752-f9c01afc824b", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:wagoodman:go-presenter:v0.0.0-20211015174752-f9c01afc824b:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:wagoodman:go_presenter:v0.0.0-20211015174752-f9c01afc824b:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/wagoodman/go-presenter@v0.0.0-20211015174752-f9c01afc824b"}]}, {"name": "github.com/wagoodman/go-progress", "SPDXID": "SPDXRef-Package-go-module-github.com-wagoodman-go-progress-ce78c6f0325a9ca8", "versionInfo": "v0.0.0-20260303201901-10176f79b2c0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:wagoodman:go-progress:v0.0.0-20260303201901-10176f79b2c0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:wagoodman:go_progress:v0.0.0-20260303201901-10176f79b2c0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/wagoodman/go-progress@v0.0.0-20260303201901-10176f79b2c0"}]}, {"name": "github.com/xanzy/ssh-agent", "SPDXID": "SPDXRef-Package-go-module-github.com-xanzy-ssh-agent-865acd2a6c43d907", "versionInfo": "v0.3.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:xanzy:ssh-agent:v0.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:xanzy:ssh_agent:v0.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/xanzy/ssh-agent@v0.3.3"}]}, {"name": "github.com/xi2/xz", "SPDXID": "SPDXRef-Package-go-module-github.com-xi2-xz-a2bdb18bf5d0e288", "versionInfo": "v0.0.0-20171230120015-48954b6210f8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:xi2:xz:v0.0.0-20171230120015-48954b6210f8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/xi2/xz@v0.0.0-20171230120015-48954b6210f8"}]}, {"name": "github.com/xo/terminfo", "SPDXID": "SPDXRef-Package-go-module-github.com-xo-terminfo-9a89e52a7e14d868", "versionInfo": "v0.0.0-20220910002029-abceb7e1c41e", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:xo:terminfo:v0.0.0-20220910002029-abceb7e1c41e:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/xo/terminfo@v0.0.0-20220910002029-abceb7e1c41e"}]}, {"name": "github.com/zclconf/go-cty", "SPDXID": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-8a6d77ef14940fd0", "versionInfo": "v1.16.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zclconf:go-cty:v1.16.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zclconf:go_cty:v1.16.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/zclconf/go-cty@v1.16.3"}]}, {"name": "github.com/zyedidia/generic", "SPDXID": "SPDXRef-Package-go-module-github.com-zyedidia-generic-dcf5ca6371b407c0", "versionInfo": "v1.2.2-0.20230320175451-4410d2372cb1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zyedidia:generic:v1.2.2-0.20230320175451-4410d2372cb1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/zyedidia/generic@v1.2.2-0.20230320175451-4410d2372cb1"}]}, {"name": "go.etcd.io/bbolt", "SPDXID": "SPDXRef-Package-go-module-go.etcd.io-bbolt-7fbeb7171aa8a76d", "versionInfo": "v1.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.etcd.io/bbolt@v1.4.3"}]}, {"name": "go.opentelemetry.io/auto/sdk", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-fb964e8164e696bd", "versionInfo": "v1.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:auto:sdk:v1.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1"}]}, {"name": "go.opentelemetry.io/contrib/detectors/gcp", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-detectors-gcp-55c43c793aa25633", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contrib:detectors\\/gcp:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/detectors@v1.44.0#gcp"}]}, {"name": "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-71573abbc1ef03eb", "versionInfo": "v0.68.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/google.golang.org\\/grpc\\/otelgrpc:v0.68.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation@v0.68.0#google.golang.org/grpc/otelgrpc"}]}, {"name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-ddd26704e01faf36", "versionInfo": "v0.68.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/otelhttp:v0.68.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation@v0.68.0#net/http/otelhttp"}]}, {"name": "go.opentelemetry.io/otel", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-e19038fc7a2b5d5e", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel@v1.44.0"}]}, {"name": "go.opentelemetry.io/otel/metric", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-7178bc1c99ba455f", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:metric:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/metric@v1.44.0"}]}, {"name": "go.opentelemetry.io/otel/sdk", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-7897af7eff391110", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:sdk:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.44.0"}]}, {"name": "go.opentelemetry.io/otel/sdk/metric", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-3ebc4c0c63921ca8", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:sdk\\/metric:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.44.0#metric"}]}, {"name": "go.opentelemetry.io/otel/trace", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-376e8db55aa8303b", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:trace:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/trace@v1.44.0"}]}, {"name": "go.yaml.in/yaml/v3", "SPDXID": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-52846ed3b72b970d", "versionInfo": "v3.0.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml:v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.yaml.in/yaml/v3@v3.0.5"}]}, {"name": "go4.org", "SPDXID": "SPDXRef-Package-go-module-go4.org-ea62044ab737b10f", "versionInfo": "v0.0.0-20230225012048-214862532bf5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go4.org@v0.0.0-20230225012048-214862532bf5"}]}, {"name": "golang.org/x/crypto", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-crypto-91fd075daa6db87d", "versionInfo": "v0.56.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:ssh:v0.56.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/crypto@v0.56.0"}]}, {"name": "golang.org/x/exp", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-exp-5f5a8b89eb1e2e4a", "versionInfo": "v0.0.0-20260410095643-746e56fc9e2f", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/exp:v0.0.0-20260410095643-746e56fc9e2f:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/exp@v0.0.0-20260410095643-746e56fc9e2f"}]}, {"name": "golang.org/x/mod", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-mod-d1b278826d6b8b11", "versionInfo": "v0.41.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/mod:v0.41.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/mod@v0.41.0"}]}, {"name": "golang.org/x/net", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-net-02f72eb5c32daaf6", "versionInfo": "v0.58.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:networking:v0.58.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/net@v0.58.0"}]}, {"name": "golang.org/x/oauth2", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-oauth2-c024415239ef086b", "versionInfo": "v0.36.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/oauth2:v0.36.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/oauth2@v0.36.0"}]}, {"name": "golang.org/x/sync", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sync-e652a5c32fec0aea", "versionInfo": "v0.22.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sync:v0.22.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sync@v0.22.0"}]}, {"name": "golang.org/x/sys", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sys-60e80e1b9e85325b", "versionInfo": "v0.47.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sys:v0.47.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sys@v0.47.0"}]}, {"name": "golang.org/x/term", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-term-6b724b4554d57b93", "versionInfo": "v0.45.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/term:v0.45.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/term@v0.45.0"}]}, {"name": "golang.org/x/text", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-text-c0fae8d9173f6f8d", "versionInfo": "v0.41.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:text:v0.41.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/text@v0.41.0"}]}, {"name": "golang.org/x/time", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-time-a8924caf483787b8", "versionInfo": "v0.16.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/time:v0.16.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/time@v0.16.0"}]}, {"name": "golang.org/x/tools", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-tools-9dfc76e848e5458c", "versionInfo": "v0.49.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/tools:v0.49.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/tools@v0.49.0"}]}, {"name": "golang.org/x/xerrors", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-xerrors-c33e64efc6c2dc66", "versionInfo": "v0.0.0-20240903120638-7835f813f4da", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/xerrors:v0.0.0-20240903120638-7835f813f4da:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/xerrors@v0.0.0-20240903120638-7835f813f4da"}]}, {"name": "google.golang.org/api", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-api-32f153af8d3eec0b", "versionInfo": "v0.294.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:api:v0.294.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/api@v0.294.0"}]}, {"name": "google.golang.org/genproto", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-123baded69448bf0", "versionInfo": "v0.0.0-20260715232425-e75dac1f907d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260715232425-e75dac1f907d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto@v0.0.0-20260715232425-e75dac1f907d"}]}, {"name": "google.golang.org/genproto/googleapis/api", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-7d99329c26b5c44e", "versionInfo": "v0.0.0-20260715232425-e75dac1f907d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260715232425-e75dac1f907d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260715232425-e75dac1f907d#api"}]}, {"name": "google.golang.org/genproto/googleapis/rpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-21807e717ffd2b14", "versionInfo": "v0.0.0-20260819154853-08b0e4226688", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260819154853-08b0e4226688:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260819154853-08b0e4226688#rpc"}]}, {"name": "google.golang.org/grpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-grpc-b7a48a71952e46e2", "versionInfo": "v1.83.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:grpc:v1.83.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/grpc@v1.83.2"}]}, {"name": "google.golang.org/protobuf", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-protobuf-7a19ee88cdf80c8c", "versionInfo": "v1.36.12", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:protobuf:v1.36.12:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/protobuf@v1.36.12"}]}, {"name": "gopkg.in/warnings.v0", "SPDXID": "SPDXRef-Package-go-module-gopkg.in-warnings.v0-62dc26b49c827903", "versionInfo": "v0.1.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/gopkg.in/warnings.v0@v0.1.2"}]}, {"name": "gopkg.in/yaml.v3", "SPDXID": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-32b8daf3599a6d08", "versionInfo": "v3.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml_project:yaml:v3.0.1:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/gopkg.in/yaml.v3@v3.0.1"}]}, {"name": "gorm.io/gorm", "SPDXID": "SPDXRef-Package-go-module-gorm.io-gorm-b91d65a304d35f59", "versionInfo": "v1.31.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/gorm.io/gorm@v1.31.2"}]}, {"name": "grype", "SPDXID": "SPDXRef-Package-rpm-grype-b91008818cbc1820", "versionInfo": "0.119.0-0.2.hum1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from RPM DB: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grype:grype:0.119.0-0.2.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/hummingbird/grype@0.119.0-0.2.hum1?distro=hummingbird-1"}]}, {"name": "howett.net/plist", "SPDXID": "SPDXRef-Package-go-module-howett.net-plist-a12bd6a3cfcd37f9", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/howett.net/plist@v1.0.1"}]}, {"name": "modernc.org/libc", "SPDXID": "SPDXRef-Package-go-module-modernc.org-libc-06527532817d672e", "versionInfo": "v1.75.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/modernc.org/libc@v1.75.6"}]}, {"name": "modernc.org/mathutil", "SPDXID": "SPDXRef-Package-go-module-modernc.org-mathutil-fc9ea68bba38fa6f", "versionInfo": "v1.7.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/modernc.org/mathutil@v1.7.1"}]}, {"name": "modernc.org/memory", "SPDXID": "SPDXRef-Package-go-module-modernc.org-memory-eeaed50a1393dcbd", "versionInfo": "v1.12.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/modernc.org/memory@v1.12.1"}]}, {"name": "modernc.org/sqlite", "SPDXID": "SPDXRef-Package-go-module-modernc.org-sqlite-205b992849f4483a", "versionInfo": "v1.58.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/modernc.org/sqlite@v1.58.0"}]}, {"name": "stdlib", "SPDXID": "SPDXRef-Package-go-module-stdlib-765c93b72a178fff", "versionInfo": "go1.27.2-X:nodwarf5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:go:1.27.2:-:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/stdlib@1.27.2-X%3Anodwarf5"}]}, {"name": "rpm-extracted/grype-0.119.0-0.2.hum1.s390x", "SPDXID": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "grype", "SPDXID": "SPDXRef-Package-rpm-grype-2f73667f8e626d4a", "versionInfo": "0.119.0-0.2.hum1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from RPM DB: /usr/lib/debug/usr/bin/grype-0.119.0-0.2.hum1.s390x.debug", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grype:grype:0.119.0-0.2.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/hummingbird/grype@0.119.0-0.2.hum1?distro=hummingbird-1"}]}, {"name": "rpm-extracted/grype-debuginfo-0.119.0-0.2.hum1.s390x", "SPDXID": "SPDXRef-Directory-Root-grype-debuginfo-0.119.0-0.2.hum1.s390x", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "rpm-extracted/grype-debugsource-0.119.0-0.2.hum1.s390x", "SPDXID": "SPDXRef-Directory-Root-grype-debugsource-0.119.0-0.2.hum1.s390x", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "cel.dev/expr", "SPDXID": "SPDXRef-Package-go-module-cel.dev-expr-dab9cabb72d5bb46", "versionInfo": "v0.25.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cel.dev/expr@v0.25.2"}]}, {"name": "cloud.google.com/go", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-821e89cdbb290250", "versionInfo": "v0.123.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go@v0.123.0"}]}, {"name": "cloud.google.com/go/auth", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-auth-5c993170322ff726", "versionInfo": "v0.23.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:auth:v0.23.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/auth@v0.23.2"}]}, {"name": "cloud.google.com/go/auth/oauth2adapt", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-712ee505e63cd3de", "versionInfo": "v0.2.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:auth\\/oauth2adapt:v0.2.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/auth@v0.2.8#oauth2adapt"}]}, {"name": "cloud.google.com/go/compute/metadata", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-9f5f86a04390156f", "versionInfo": "v0.9.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:compute\\/metadata:v0.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/compute@v0.9.0#metadata"}]}, {"name": "cloud.google.com/go/iam", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-iam-be69052a12f1cd47", "versionInfo": "v1.12.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:iam:v1.12.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/iam@v1.12.0"}]}, {"name": "cloud.google.com/go/monitoring", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-monitoring-90d81c2f258a584c", "versionInfo": "v1.30.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:monitoring:v1.30.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/monitoring@v1.30.0"}]}, {"name": "cloud.google.com/go/storage", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-storage-ea25db81f3081631", "versionInfo": "v1.65.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:storage:v1.65.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/storage@v1.65.1"}]}, {"name": "dario.cat/mergo", "SPDXID": "SPDXRef-Package-go-module-dario.cat-mergo-7578909db6771690", "versionInfo": "v1.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/dario.cat/mergo@v1.0.2"}]}, {"name": "github.com/BurntSushi/toml", "SPDXID": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-1ab117ccbd042403", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:BurntSushi:toml:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/BurntSushi/toml@v1.6.0"}]}, {"name": "github.com/CycloneDX/cyclonedx-go", "SPDXID": "SPDXRef-Package-go-module-github.com-CycloneDX-cyclonedx-go-1ccec3285c5bc968", "versionInfo": "v0.12.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:CycloneDX:cyclonedx-go:v0.12.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:CycloneDX:cyclonedx_go:v0.12.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/CycloneDX/cyclonedx-go@v0.12.0"}]}, {"name": "github.com/DataDog/zstd", "SPDXID": "SPDXRef-Package-go-module-github.com-DataDog-zstd-ffa857083cc5fee1", "versionInfo": "v1.5.7", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:DataDog:zstd:v1.5.7:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/DataDog/zstd@v1.5.7"}]}, {"name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp", "SPDXID": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-detectors-gcp-400ecfe05d06962a", "versionInfo": "v1.33.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry-operations-go\\/detectors\\/gcp:v1.33.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry_operations_go\\/detectors\\/gcp:v1.33.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go@v1.33.0#detectors/gcp"}]}, {"name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric", "SPDXID": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-exporter-metric-914cd3b51ebcdac9", "versionInfo": "v0.57.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry-operations-go\\/exporter\\/metric:v0.57.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry_operations_go\\/exporter\\/metric:v0.57.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go@v0.57.0#exporter/metric"}]}, {"name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping", "SPDXID": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-internal-resourcemapping-4012720b611c6ce2", "versionInfo": "v0.57.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry-operations-go\\/internal\\/resourcemapping:v0.57.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry_operations_go\\/internal\\/resourcemapping:v0.57.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go@v0.57.0#internal/resourcemapping"}]}, {"name": "github.com/Intevation/gval", "SPDXID": "SPDXRef-Package-go-module-github.com-Intevation-gval-05d53b5456960611", "versionInfo": "v1.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Intevation:gval:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Intevation/gval@v1.3.0"}]}, {"name": "github.com/Intevation/jsonpath", "SPDXID": "SPDXRef-Package-go-module-github.com-Intevation-jsonpath-665bf1a8a6d53d1c", "versionInfo": "v0.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Intevation:jsonpath:v0.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Intevation/jsonpath@v0.2.1"}]}, {"name": "github.com/Masterminds/goutils", "SPDXID": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-639015613fb8b889", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:goutils_project:goutils:v1.1.1:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Masterminds/goutils@v1.1.1"}]}, {"name": "github.com/Masterminds/semver/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-cd04e01fb0f84b45", "versionInfo": "v3.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Masterminds:semver\\/v3:v3.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Masterminds/semver@v3.5.0#v3"}]}, {"name": "github.com/Masterminds/sprig/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-3be7c49c318b17ac", "versionInfo": "v3.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Masterminds:sprig\\/v3:v3.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Masterminds/sprig@v3.3.0#v3"}]}, {"name": "github.com/OneOfOne/xxhash", "SPDXID": "SPDXRef-Package-go-module-github.com-OneOfOne-xxhash-adafb897d44e4076", "versionInfo": "v1.2.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:OneOfOne:xxhash:v1.2.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/OneOfOne/xxhash@v1.2.8"}]}, {"name": "github.com/ProtonMail/go-crypto", "SPDXID": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-dd338f46846ec59b", "versionInfo": "v1.4.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ProtonMail:go-crypto:v1.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ProtonMail:go_crypto:v1.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/ProtonMail/go-crypto@v1.4.1"}]}, {"name": "github.com/STARRY-S/zip", "SPDXID": "SPDXRef-Package-go-module-github.com-STARRY-S-zip-4ed21f6385528904", "versionInfo": "v0.2.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:STARRY-S:zip:v0.2.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:STARRY_S:zip:v0.2.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:STARRY:zip:v0.2.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/STARRY-S/zip@v0.2.3"}]}, {"name": "github.com/acarl005/stripansi", "SPDXID": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-3fdcec0e7354ffe4", "versionInfo": "v0.0.0-20180116102854-5a71ef0e047d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:acarl005:stripansi:v0.0.0-20180116102854-5a71ef0e047d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/acarl005/stripansi@v0.0.0-20180116102854-5a71ef0e047d"}]}, {"name": "github.com/acobaugh/osrelease", "SPDXID": "SPDXRef-Package-go-module-github.com-acobaugh-osrelease-afa1a167852ad4b8", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:acobaugh:osrelease:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/acobaugh/osrelease@v0.1.0"}]}, {"name": "github.com/adrg/xdg", "SPDXID": "SPDXRef-Package-go-module-github.com-adrg-xdg-5b7b28691a85ace2", "versionInfo": "v0.5.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:adrg:xdg:v0.5.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/adrg/xdg@v0.5.3"}]}, {"name": "github.com/agext/levenshtein", "SPDXID": "SPDXRef-Package-go-module-github.com-agext-levenshtein-c4c9ac087c52e4ce", "versionInfo": "v1.2.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:agext:levenshtein:v1.2.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/agext/levenshtein@v1.2.3"}]}, {"name": "github.com/anchore/bubbly", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-bubbly-c4e6c0fa4f99cd46", "versionInfo": "v0.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:bubbly:v0.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/bubbly@v0.2.1"}]}, {"name": "github.com/anchore/clio", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-clio-51ae09fe7fc71630", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:clio:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/clio@v0.1.1"}]}, {"name": "github.com/anchore/fangs", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-fangs-0c473aaf656c2aa0", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:fangs:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/fangs@v0.1.1"}]}, {"name": "github.com/anchore/go-collections", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-collections-43cab541fc797d9e", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-collections:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_collections:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-collections@v0.1.1"}]}, {"name": "github.com/anchore/go-homedir", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-homedir-1acc7dee132a7e74", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-homedir:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_homedir:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-homedir@v0.1.1"}]}, {"name": "github.com/anchore/go-logger", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-logger-7387d11b9e3d6932", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-logger:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_logger:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-logger@v0.1.1"}]}, {"name": "github.com/anchore/go-lzo", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-lzo-0ae7262b8bdaa7dc", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-lzo:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_lzo:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-lzo@v0.1.1"}]}, {"name": "github.com/anchore/go-macholibre", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-macholibre-59b06ea00226fcf1", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-macholibre:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_macholibre:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-macholibre@v0.1.1"}]}, {"name": "github.com/anchore/go-rpmdb", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-rpmdb-e02b41901dd8e416", "versionInfo": "v0.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-rpmdb:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_rpmdb:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-rpmdb@v0.2.0"}]}, {"name": "github.com/anchore/go-struct-converter", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-struct-converter-c8bbac039e8accfb", "versionInfo": "v0.2.0-rc2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-struct-converter:v0.2.0-rc2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_struct_converter:v0.2.0-rc2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-struct-converter@v0.2.0-rc2"}]}, {"name": "github.com/anchore/go-sync", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-sync-429d8a46f6f27ed7", "versionInfo": "v0.1.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-sync:v0.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_sync:v0.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-sync@v0.1.2"}]}, {"name": "github.com/anchore/go-version", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-version-3c77e50e4b0d8d50", "versionInfo": "v1.2.2-0.20210903204242-51efa5b487c4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-version:v1.2.2-0.20210903204242-51efa5b487c4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_version:v1.2.2-0.20210903204242-51efa5b487c4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-version@v1.2.2-0.20210903204242-51efa5b487c4"}]}, {"name": "github.com/anchore/grype", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "versionInfo": "v0.119.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:grype:v0.119.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/grype@v0.119.0"}]}, {"name": "github.com/anchore/packageurl-go", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-packageurl-go-9ce180049b14c92a", "versionInfo": "v0.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:packageurl-go:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:packageurl_go:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/packageurl-go@v0.2.0"}]}, {"name": "github.com/anchore/stereoscope", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-stereoscope-25accd7e7ce550c9", "versionInfo": "v0.3.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:stereoscope:v0.3.2:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/stereoscope@v0.3.2"}]}, {"name": "github.com/anchore/syft", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-syft-99d6607d0428a2bb", "versionInfo": "v1.52.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:syft:v1.52.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/syft@v1.52.0"}]}, {"name": "github.com/andybalholm/brotli", "SPDXID": "SPDXRef-Package-go-module-github.com-andybalholm-brotli-c7758d1df10ff55e", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:andybalholm:brotli:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/andybalholm/brotli@v1.2.0"}]}, {"name": "github.com/apparentlymart/go-textseg/v15", "SPDXID": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-729906c6425c12c7", "versionInfo": "v15.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apparentlymart:go-textseg\\/v15:v15.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apparentlymart:go_textseg\\/v15:v15.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/apparentlymart/go-textseg@v15.0.0#v15"}]}, {"name": "github.com/aquasecurity/go-pep440-version", "SPDXID": "SPDXRef-Package-go-module-github.com-aquasecurity-go-pep440-version-7db1070c60e5e4ca", "versionInfo": "v0.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity:go-pep440-version:v0.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity:go_pep440_version:v0.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aquasecurity/go-pep440-version@v0.0.1"}]}, {"name": "github.com/aquasecurity/go-version", "SPDXID": "SPDXRef-Package-go-module-github.com-aquasecurity-go-version-6b592919e8aabd22", "versionInfo": "v0.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity:go-version:v0.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity:go_version:v0.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aquasecurity/go-version@v0.0.1"}]}, {"name": "github.com/araddon/dateparse", "SPDXID": "SPDXRef-Package-go-module-github.com-araddon-dateparse-1fcabdf9e84a93da", "versionInfo": "v0.0.0-20210429162001-6b43995a97de", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:araddon:dateparse:v0.0.0-20210429162001-6b43995a97de:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/araddon/dateparse@v0.0.0-20210429162001-6b43995a97de"}]}, {"name": "github.com/aws/aws-sdk-go-v2", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-d9c3066247fb6041", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.44.0"}]}, {"name": "github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-aws-protocol-eventstream-02c09c7ee90be1e5", "versionInfo": "v1.7.20", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/aws\\/protocol\\/eventstream:v1.7.20:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/aws\\/protocol\\/eventstream:v1.7.20:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.7.20#aws/protocol/eventstream"}]}, {"name": "github.com/aws/aws-sdk-go-v2/config", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-config-76462428d9a013e3", "versionInfo": "v1.32.40", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/config:v1.32.40:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/config:v1.32.40:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.32.40#config"}]}, {"name": "github.com/aws/aws-sdk-go-v2/credentials", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-credentials-e9783d2a7e870dd0", "versionInfo": "v1.19.39", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/credentials:v1.19.39:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/credentials:v1.19.39:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.19.39#credentials"}]}, {"name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-feature-ec2-imds-b86f7bc0ae23ad30", "versionInfo": "v1.18.40", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/feature\\/ec2\\/imds:v1.18.40:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/feature\\/ec2\\/imds:v1.18.40:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.18.40#feature/ec2/imds"}]}, {"name": "github.com/aws/aws-sdk-go-v2/internal/configsources", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-configsources-2bf37ef9955582c7", "versionInfo": "v1.4.40", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/configsources:v1.4.40:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/configsources:v1.4.40:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.4.40#internal/configsources"}]}, {"name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-endpoints-v2-b6265f9b5eff991b", "versionInfo": "v2.7.40", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/endpoints\\/v2:v2.7.40:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/endpoints\\/v2:v2.7.40:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v2.7.40#internal/endpoints/v2"}]}, {"name": "github.com/aws/aws-sdk-go-v2/internal/v4a", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-v4a-c458fe963dd49d25", "versionInfo": "v1.4.41", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/v4a:v1.4.41:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/v4a:v1.4.41:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.4.41#internal/v4a"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-accept-encoding-da65611700e7c9b2", "versionInfo": "v1.13.19", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/accept-encoding:v1.13.19:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/accept_encoding:v1.13.19:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.13.19#service/internal/accept-encoding"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/internal/checksum", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-checksum-38b23488ff17ea67", "versionInfo": "v1.10.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/checksum:v1.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/checksum:v1.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.10.0#service/internal/checksum"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-presigned-url-1fe331fd4acea98e", "versionInfo": "v1.13.40", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/presigned-url:v1.13.40:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/presigned_url:v1.13.40:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.13.40#service/internal/presigned-url"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/internal/s3shared", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-s3shared-a69c47e526b5d2f9", "versionInfo": "v1.19.41", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/s3shared:v1.19.41:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/s3shared:v1.19.41:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.19.41#service/internal/s3shared"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/s3", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-s3-c09def8bd2da4341", "versionInfo": "v1.108.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/s3:v1.108.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/s3:v1.108.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.108.0#service/s3"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/signin", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-signin-a0107481b8cb9e1c", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/signin:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/signin:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.6.0#service/signin"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/sso", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sso-31cc429250c3d4bb", "versionInfo": "v1.34.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/sso:v1.34.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/sso:v1.34.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.34.0#service/sso"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/ssooidc", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-ssooidc-c4ac5da9ee688e44", "versionInfo": "v1.39.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/ssooidc:v1.39.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/ssooidc:v1.39.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.39.0#service/ssooidc"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/sts", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sts-f14f84c1c5c64160", "versionInfo": "v1.46.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/sts:v1.46.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/sts:v1.46.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.46.0#service/sts"}]}, {"name": "github.com/aws/smithy-go", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-smithy-go-d2a8ee5a52312db7", "versionInfo": "v1.28.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:smithy-go:v1.28.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:smithy_go:v1.28.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/smithy-go@v1.28.1"}]}, {"name": "github.com/aymanbagabas/go-osc52/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-aymanbagabas-go-osc52-v2-564750f5b1fb9388", "versionInfo": "v2.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aymanbagabas:go-osc52\\/v2:v2.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aymanbagabas:go_osc52\\/v2:v2.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aymanbagabas/go-osc52@v2.0.1#v2"}]}, {"name": "github.com/becheran/wildmatch-go", "SPDXID": "SPDXRef-Package-go-module-github.com-becheran-wildmatch-go-c280892f1f67e7c7", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:becheran:wildmatch-go:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:becheran:wildmatch_go:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/becheran/wildmatch-go@v1.0.0"}]}, {"name": "github.com/bgentry/go-netrc", "SPDXID": "SPDXRef-Package-go-module-github.com-bgentry-go-netrc-0fea42078665f197", "versionInfo": "v0.0.0-20140422174119-9fd32a8b3d3d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bgentry:go-netrc:v0.0.0-20140422174119-9fd32a8b3d3d:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bgentry:go_netrc:v0.0.0-20140422174119-9fd32a8b3d3d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bgentry/go-netrc@v0.0.0-20140422174119-9fd32a8b3d3d"}]}, {"name": "github.com/bitnami/go-version", "SPDXID": "SPDXRef-Package-go-module-github.com-bitnami-go-version-837d03c9e4e27ecf", "versionInfo": "v0.0.0-20250505154626-452e8c5ee607", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bitnami:go-version:v0.0.0-20250505154626-452e8c5ee607:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bitnami:go_version:v0.0.0-20250505154626-452e8c5ee607:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bitnami/go-version@v0.0.0-20250505154626-452e8c5ee607"}]}, {"name": "github.com/blakesmith/ar", "SPDXID": "SPDXRef-Package-go-module-github.com-blakesmith-ar-5828026f5da48c2a", "versionInfo": "v0.0.0-20190502131153-809d4375e1fb", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:blakesmith:ar:v0.0.0-20190502131153-809d4375e1fb:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/blakesmith/ar@v0.0.0-20190502131153-809d4375e1fb"}]}, {"name": "github.com/bmatcuk/doublestar/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v2-a18427aa19091e58", "versionInfo": "v2.0.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bmatcuk:doublestar\\/v2:v2.0.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bmatcuk/doublestar@v2.0.4#v2"}]}, {"name": "github.com/bmatcuk/doublestar/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v4-a162dc5be54f5eb1", "versionInfo": "v4.10.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bmatcuk:doublestar\\/v4:v4.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bmatcuk/doublestar@v4.10.0#v4"}]}, {"name": "github.com/bodgit/plumbing", "SPDXID": "SPDXRef-Package-go-module-github.com-bodgit-plumbing-594c467dad20f68c", "versionInfo": "v1.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bodgit:plumbing:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bodgit/plumbing@v1.3.0"}]}, {"name": "github.com/bodgit/sevenzip", "SPDXID": "SPDXRef-Package-go-module-github.com-bodgit-sevenzip-343e945190f7f50b", "versionInfo": "v1.6.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bodgit:sevenzip:v1.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bodgit/sevenzip@v1.6.1"}]}, {"name": "github.com/bodgit/windows", "SPDXID": "SPDXRef-Package-go-module-github.com-bodgit-windows-1171f190fdc2fb2f", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bodgit:windows:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bodgit/windows@v1.0.1"}]}, {"name": "github.com/cespare/xxhash/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-c525b351dea6a5f6", "versionInfo": "v2.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cespare/xxhash@v2.3.0#v2"}]}, {"name": "github.com/charmbracelet/bubbles", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbles-e7fd891e0ae77807", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:bubbles:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/bubbles@v1.0.0"}]}, {"name": "github.com/charmbracelet/bubbletea", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbletea-f2bf812afd2d5439", "versionInfo": "v1.3.10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:bubbletea:v1.3.10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/bubbletea@v1.3.10"}]}, {"name": "github.com/charmbracelet/colorprofile", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-colorprofile-edc527343984daed", "versionInfo": "v0.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:colorprofile:v0.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/colorprofile@v0.4.3"}]}, {"name": "github.com/charmbracelet/harmonica", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-harmonica-1c9f1265c8c6f415", "versionInfo": "v0.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:harmonica:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/harmonica@v0.2.0"}]}, {"name": "github.com/charmbracelet/lipgloss", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-lipgloss-4d053589b69133bd", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:lipgloss:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/lipgloss@v1.1.0"}]}, {"name": "github.com/charmbracelet/x/ansi", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-x-ansi-8cbf485ea8226790", "versionInfo": "v0.11.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:x\\/ansi:v0.11.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/x@v0.11.6#ansi"}]}, {"name": "github.com/charmbracelet/x/cellbuf", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-x-cellbuf-e5b3e7c100e94ba2", "versionInfo": "v0.0.15", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:x\\/cellbuf:v0.0.15:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/x@v0.0.15#cellbuf"}]}, {"name": "github.com/charmbracelet/x/term", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-x-term-cef6cc5c1b739279", "versionInfo": "v0.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:x\\/term:v0.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/x@v0.2.2#term"}]}, {"name": "github.com/clipperhouse/displaywidth", "SPDXID": "SPDXRef-Package-go-module-github.com-clipperhouse-displaywidth-d8f5af40ae3a550f", "versionInfo": "v0.11.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:clipperhouse:displaywidth:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/clipperhouse/displaywidth@v0.11.0"}]}, {"name": "github.com/clipperhouse/uax29/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-3e55a9d13773d7f8", "versionInfo": "v2.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:clipperhouse:uax29\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/clipperhouse/uax29@v2.7.0#v2"}]}, {"name": "github.com/cloudflare/circl", "SPDXID": "SPDXRef-Package-go-module-github.com-cloudflare-circl-552ebe0b77defbc3", "versionInfo": "v1.6.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cloudflare:circl:v1.6.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cloudflare/circl@v1.6.3"}]}, {"name": "github.com/cncf/xds/go", "SPDXID": "SPDXRef-Package-go-module-github.com-cncf-xds-go-44e4999b6b99f41f", "versionInfo": "v0.0.0-20260202195803-dba9d589def2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cncf:xds\\/go:v0.0.0-20260202195803-dba9d589def2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cncf/xds@v0.0.0-20260202195803-dba9d589def2#go"}]}, {"name": "github.com/containerd/containerd/api", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-7922a3d811bae956", "versionInfo": "v1.11.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:containerd\\/api:v1.11.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/containerd@v1.11.1#api"}]}, {"name": "github.com/containerd/containerd/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-6e3ae06acc6bf600", "versionInfo": "v2.3.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:containerd\\/v2:v2.3.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/containerd@v2.3.5#v2"}]}, {"name": "github.com/containerd/continuity", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-continuity-d39f3c9e33e66d29", "versionInfo": "v0.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:continuity:v0.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/continuity@v0.5.0"}]}, {"name": "github.com/containerd/errdefs", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-errdefs-5f674858265518ea", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:errdefs:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/errdefs@v1.0.0"}]}, {"name": "github.com/containerd/errdefs/pkg", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-8bd908fd2f703bb2", "versionInfo": "v0.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:errdefs\\/pkg:v0.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/errdefs@v0.3.0#pkg"}]}, {"name": "github.com/containerd/fifo", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-fifo-d7b8c24758b961df", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:fifo:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/fifo@v1.1.0"}]}, {"name": "github.com/containerd/log", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-log-e2425233221d9aa2", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:log:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/log@v0.1.0"}]}, {"name": "github.com/containerd/platforms", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-platforms-7e52ac85fd635425", "versionInfo": "v1.0.0-rc.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:platforms:v1.0.0-rc.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/platforms@v1.0.0-rc.5"}]}, {"name": "github.com/containerd/plugin", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-plugin-343af9cbe5533124", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:plugin:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/plugin@v1.1.0"}]}, {"name": "github.com/containerd/ttrpc", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-d75f178b5a92f86e", "versionInfo": "v1.2.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:ttrpc:v1.2.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/ttrpc@v1.2.8"}]}, {"name": "github.com/containerd/typeurl/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-d2859347e22c5669", "versionInfo": "v2.2.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:typeurl\\/v2:v2.2.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/typeurl@v2.2.3#v2"}]}, {"name": "github.com/cyphar/filepath-securejoin", "SPDXID": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-6c3b178b90746ff7", "versionInfo": "v0.6.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyphar:filepath-securejoin:v0.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyphar:filepath_securejoin:v0.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cyphar/filepath-securejoin@v0.6.1"}]}, {"name": "github.com/deitch/magic", "SPDXID": "SPDXRef-Package-go-module-github.com-deitch-magic-c5a9f2645fc4f0a3", "versionInfo": "v0.0.0-20240306090643-c67ab88f10cb", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:deitch:magic:v0.0.0-20240306090643-c67ab88f10cb:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/deitch/magic@v0.0.0-20240306090643-c67ab88f10cb"}]}, {"name": "github.com/diskfs/go-diskfs", "SPDXID": "SPDXRef-Package-go-module-github.com-diskfs-go-diskfs-851de5f5d49841ec", "versionInfo": "v1.9.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:diskfs:go-diskfs:v1.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:diskfs:go_diskfs:v1.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/diskfs/go-diskfs@v1.9.4"}]}, {"name": "github.com/distribution/reference", "SPDXID": "SPDXRef-Package-go-module-github.com-distribution-reference-a12b09e551205dfc", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:distribution:reference:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/distribution/reference@v0.6.0"}]}, {"name": "github.com/docker/cli", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-cli-4ee99b27f6d9c593", "versionInfo": "v29.8.0+incompatible", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:cli:v29.8.0\\+incompatible:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/cli@v29.8.0%2Bincompatible"}]}, {"name": "github.com/docker/docker", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-docker-a2d32bfdf9fbc222", "versionInfo": "v28.5.2+incompatible", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:docker:v28.5.2\\+incompatible:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/docker@v28.5.2%2Bincompatible"}]}, {"name": "github.com/docker/docker-credential-helpers", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-38d7aae755fe06b4", "versionInfo": "v0.9.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:docker-credential-helpers:v0.9.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:docker_credential_helpers:v0.9.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.5"}]}, {"name": "github.com/docker/go-connections", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-go-connections-b477a1fd062aa373", "versionInfo": "v0.8.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go-connections:v0.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go_connections:v0.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/go-connections@v0.8.1"}]}, {"name": "github.com/docker/go-units", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-go-units-9d751bbcb0abbd2a", "versionInfo": "v0.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go-units:v0.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go_units:v0.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/go-units@v0.5.0"}]}, {"name": "github.com/dsnet/compress", "SPDXID": "SPDXRef-Package-go-module-github.com-dsnet-compress-385a53b14c3137fa", "versionInfo": "v0.0.2-0.20230904184137-39efe44ab707", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dsnet:compress:v0.0.2-0.20230904184137-39efe44ab707:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/dsnet/compress@v0.0.2-0.20230904184137-39efe44ab707"}]}, {"name": "github.com/dustin/go-humanize", "SPDXID": "SPDXRef-Package-go-module-github.com-dustin-go-humanize-2152051a3e485ce9", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dustin:go-humanize:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dustin:go_humanize:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/dustin/go-humanize@v1.0.1"}]}, {"name": "github.com/elliotchance/phpserialize", "SPDXID": "SPDXRef-Package-go-module-github.com-elliotchance-phpserialize-b796bb62aafa8b5d", "versionInfo": "v1.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:elliotchance:phpserialize:v1.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/elliotchance/phpserialize@v1.4.0"}]}, {"name": "github.com/emirpasic/gods", "SPDXID": "SPDXRef-Package-go-module-github.com-emirpasic-gods-570013ee36476888", "versionInfo": "v1.18.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:emirpasic:gods:v1.18.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/emirpasic/gods@v1.18.1"}]}, {"name": "github.com/envoyproxy/go-control-plane/envoy", "SPDXID": "SPDXRef-Package-go-module-github.com-envoyproxy-go-control-plane-envoy-19501f2298ba256b", "versionInfo": "v1.37.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:envoyproxy:go-control-plane\\/envoy:v1.37.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:envoyproxy:go_control_plane\\/envoy:v1.37.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/envoyproxy/go-control-plane@v1.37.0#envoy"}]}, {"name": "github.com/envoyproxy/protoc-gen-validate", "SPDXID": "SPDXRef-Package-go-module-github.com-envoyproxy-protoc-gen-validate-9edbbd1c71cd33bc", "versionInfo": "v1.3.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:envoyproxy:protoc-gen-validate:v1.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:envoyproxy:protoc_gen_validate:v1.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.3.3"}]}, {"name": "github.com/facebookincubator/nvdtools", "SPDXID": "SPDXRef-Package-go-module-github.com-facebookincubator-nvdtools-cd620062141ee186", "versionInfo": "v0.1.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:facebookincubator:nvdtools:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/facebookincubator/nvdtools@v0.1.5"}]}, {"name": "github.com/fatih/color", "SPDXID": "SPDXRef-Package-go-module-github.com-fatih-color-c3455e6d84c9bb95", "versionInfo": "v1.19.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fatih:color:v1.19.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fatih/color@v1.19.0"}]}, {"name": "github.com/felixge/fgprof", "SPDXID": "SPDXRef-Package-go-module-github.com-felixge-fgprof-5095fba777deaa6a", "versionInfo": "v0.9.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:felixge:fgprof:v0.9.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/felixge/fgprof@v0.9.5"}]}, {"name": "github.com/felixge/httpsnoop", "SPDXID": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-adc09a42117fb1ad", "versionInfo": "v1.0.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:felixge:httpsnoop:v1.0.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/felixge/httpsnoop@v1.0.4"}]}, {"name": "github.com/fsnotify/fsnotify", "SPDXID": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-20c2c401ba07fcf3", "versionInfo": "v1.9.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fsnotify:fsnotify:v1.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fsnotify/fsnotify@v1.9.0"}]}, {"name": "github.com/gabriel-vasile/mimetype", "SPDXID": "SPDXRef-Package-go-module-github.com-gabriel-vasile-mimetype-2307b2f8849a0240", "versionInfo": "v1.4.15", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gabriel-vasile:mimetype:v1.4.15:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gabriel_vasile:mimetype:v1.4.15:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gabriel:mimetype:v1.4.15:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gabriel-vasile/mimetype@v1.4.15"}]}, {"name": "github.com/github/go-spdx/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-github-go-spdx-v2-405e062149c98650", "versionInfo": "v2.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github:go-spdx\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github:go_spdx\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/github/go-spdx@v2.7.0#v2"}]}, {"name": "github.com/glebarez/go-sqlite", "SPDXID": "SPDXRef-Package-go-module-github.com-glebarez-go-sqlite-7d78191a13754ef3", "versionInfo": "v1.22.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:glebarez:go-sqlite:v1.22.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:glebarez:go_sqlite:v1.22.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/glebarez/go-sqlite@v1.22.0"}]}, {"name": "github.com/glebarez/sqlite", "SPDXID": "SPDXRef-Package-go-module-github.com-glebarez-sqlite-b2580c4d41b57f44", "versionInfo": "v1.11.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:glebarez:sqlite:v1.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/glebarez/sqlite@v1.11.0"}]}, {"name": "github.com/go-git/gcfg", "SPDXID": "SPDXRef-Package-go-module-github.com-go-git-gcfg-87209058f2438d99", "versionInfo": "v1.5.1-0.20230307220236-3a3c6141e376", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-git:gcfg:v1.5.1-0.20230307220236-3a3c6141e376:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_git:gcfg:v1.5.1-0.20230307220236-3a3c6141e376:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:gcfg:v1.5.1-0.20230307220236-3a3c6141e376:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-git/gcfg@v1.5.1-0.20230307220236-3a3c6141e376"}]}, {"name": "github.com/go-git/go-billy/v5", "SPDXID": "SPDXRef-Package-go-module-github.com-go-git-go-billy-v5-4304949a0ab6da99", "versionInfo": "v5.9.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-git:go-billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-git:go_billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_git:go-billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_git:go_billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-git/go-billy@v5.9.1#v5"}]}, {"name": "github.com/go-git/go-git/v5", "SPDXID": "SPDXRef-Package-go-module-github.com-go-git-go-git-v5-31272155567d6912", "versionInfo": "v5.19.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-git:go-git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-git:go_git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_git:go-git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_git:go_git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-git/go-git@v5.19.2#v5"}]}, {"name": "github.com/go-jose/go-jose/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-d24a40277ca9d1ed", "versionInfo": "v4.1.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-jose/go-jose@v4.1.4#v4"}]}, {"name": "github.com/go-logr/logr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-logr-682e9d48586e04f9", "versionInfo": "v1.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:logr:v1.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:logr:v1.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:logr:v1.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/logr@v1.4.3"}]}, {"name": "github.com/go-logr/stdr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-stdr-da95a517a7ac61dc", "versionInfo": "v1.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/stdr@v1.2.2"}]}, {"name": "github.com/go-restruct/restruct", "SPDXID": "SPDXRef-Package-go-module-github.com-go-restruct-restruct-10122f73574216f0", "versionInfo": "v1.2.0-alpha", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-restruct:restruct:v1.2.0-alpha:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_restruct:restruct:v1.2.0-alpha:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:restruct:v1.2.0-alpha:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-restruct/restruct@v1.2.0-alpha"}]}, {"name": "github.com/go-viper/mapstructure/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-97bca7fb5b457a25", "versionInfo": "v2.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-viper/mapstructure@v2.5.0#v2"}]}, {"name": "github.com/goccy/go-yaml", "SPDXID": "SPDXRef-Package-go-module-github.com-goccy-go-yaml-9964b26a60168c56", "versionInfo": "v1.19.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:goccy:go-yaml:v1.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:goccy:go_yaml:v1.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/goccy/go-yaml@v1.19.2"}]}, {"name": "github.com/gocsaf/csaf/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-gocsaf-csaf-v3-9048877e8c80ce5a", "versionInfo": "v3.5.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gocsaf:csaf\\/v3:v3.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gocsaf/csaf@v3.5.1#v3"}]}, {"name": "github.com/gogo/protobuf", "SPDXID": "SPDXRef-Package-go-module-github.com-gogo-protobuf-a9cf386f92835f5e", "versionInfo": "v1.3.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gogo:protobuf:v1.3.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gogo/protobuf@v1.3.2"}]}, {"name": "github.com/gohugoio/hashstructure", "SPDXID": "SPDXRef-Package-go-module-github.com-gohugoio-hashstructure-4f5d86992f7f4e69", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gohugoio:hashstructure:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gohugoio/hashstructure@v0.6.0"}]}, {"name": "github.com/golang/groupcache", "SPDXID": "SPDXRef-Package-go-module-github.com-golang-groupcache-2e395983502626d7", "versionInfo": "v0.0.0-20241129210726-2c02b8208cf8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:groupcache:v0.0.0-20241129210726-2c02b8208cf8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/golang/groupcache@v0.0.0-20241129210726-2c02b8208cf8"}]}, {"name": "github.com/google/go-cmp", "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-cmp-60978427708fb05f", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go-cmp:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go_cmp:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/go-cmp@v0.7.0"}]}, {"name": "github.com/google/go-containerregistry", "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-e42947b05a7f7dcd", "versionInfo": "v0.22.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go-containerregistry:v0.22.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go_containerregistry:v0.22.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/go-containerregistry@v0.22.1"}]}, {"name": "github.com/google/licensecheck", "SPDXID": "SPDXRef-Package-go-module-github.com-google-licensecheck-6cde3c8b11d05047", "versionInfo": "v0.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:licensecheck:v0.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/licensecheck@v0.3.1"}]}, {"name": "github.com/google/pprof", "SPDXID": "SPDXRef-Package-go-module-github.com-google-pprof-93b67eaf85f85586", "versionInfo": "v0.0.0-20260802141513-ef3492d7dac3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:pprof:v0.0.0-20260802141513-ef3492d7dac3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/pprof@v0.0.0-20260802141513-ef3492d7dac3"}]}, {"name": "github.com/google/s2a-go", "SPDXID": "SPDXRef-Package-go-module-github.com-google-s2a-go-9eb31f26ff53e617", "versionInfo": "v0.1.9", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:s2a-go:v0.1.9:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:s2a_go:v0.1.9:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/s2a-go@v0.1.9"}]}, {"name": "github.com/google/uuid", "SPDXID": "SPDXRef-Package-go-module-github.com-google-uuid-6396de215f422d6f", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/uuid@v1.6.0"}]}, {"name": "github.com/googleapis/enterprise-certificate-proxy", "SPDXID": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-b805a6f5281675df", "versionInfo": "v0.3.20", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:enterprise-certificate-proxy:v0.3.20:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:enterprise_certificate_proxy:v0.3.20:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.20"}]}, {"name": "github.com/googleapis/gax-go/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-b6573c76175f5add", "versionInfo": "v2.24.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:gax-go\\/v2:v2.24.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:gax_go\\/v2:v2.24.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/googleapis/gax-go@v2.24.0#v2"}]}, {"name": "github.com/gookit/color", "SPDXID": "SPDXRef-Package-go-module-github.com-gookit-color-1dd37bef036a2a62", "versionInfo": "v1.6.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gookit:color:v1.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gookit/color@v1.6.1"}]}, {"name": "github.com/gpustack/gguf-parser-go", "SPDXID": "SPDXRef-Package-go-module-github.com-gpustack-gguf-parser-go-815bd82aa900d29a", "versionInfo": "v0.26.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gpustack:gguf-parser-go:v0.26.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gpustack:gguf_parser_go:v0.26.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gpustack/gguf-parser-go@v0.26.3"}]}, {"name": "github.com/hako/durafmt", "SPDXID": "SPDXRef-Package-go-module-github.com-hako-durafmt-c39cca3b5dbc5b2a", "versionInfo": "v0.0.0-20210608085754-5c1018a4e16b", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hako:durafmt:v0.0.0-20210608085754-5c1018a4e16b:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hako/durafmt@v0.0.0-20210608085754-5c1018a4e16b"}]}, {"name": "github.com/hashicorp/aws-sdk-go-base/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-aws-sdk-go-base-v2-a1dad38bc18b2121", "versionInfo": "v2.0.0-beta.74", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:aws-sdk-go-base\\/v2:v2.0.0-beta.74:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:aws_sdk_go_base\\/v2:v2.0.0-beta.74:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/aws-sdk-go-base@v2.0.0-beta.74#v2"}]}, {"name": "github.com/hashicorp/errwrap", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-1d875db53206d26a", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:errwrap:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0"}]}, {"name": "github.com/hashicorp/go-cleanhttp", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-3919b6d7c996f66b", "versionInfo": "v0.5.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-cleanhttp:v0.5.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_cleanhttp:v0.5.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2"}]}, {"name": "github.com/hashicorp/go-getter", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-getter-5d0cbdab125b2831", "versionInfo": "v1.8.9", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-getter:v1.8.9:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_getter:v1.8.9:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-getter@v1.8.9"}]}, {"name": "github.com/hashicorp/go-multierror", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-6f1561bf6b96fa60", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-multierror:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_multierror:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1"}]}, {"name": "github.com/hashicorp/go-version", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-a518b7c4dc7c2161", "versionInfo": "v1.9.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-version:v1.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_version:v1.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-version@v1.9.0"}]}, {"name": "github.com/hashicorp/golang-lru/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-golang-lru-v2-0830468243aa0f2c", "versionInfo": "v2.0.7", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:golang-lru\\/v2:v2.0.7:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:golang_lru\\/v2:v2.0.7:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/golang-lru@v2.0.7#v2"}]}, {"name": "github.com/hashicorp/hcl/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-55c740ad726abec6", "versionInfo": "v2.24.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:hcl\\/v2:v2.24.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/hcl@v2.24.0#v2"}]}, {"name": "github.com/henvic/httpretty", "SPDXID": "SPDXRef-Package-go-module-github.com-henvic-httpretty-bb3bc723ae1d8e92", "versionInfo": "v0.1.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:henvic:httpretty:v0.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/henvic/httpretty@v0.1.4"}]}, {"name": "github.com/huandu/xstrings", "SPDXID": "SPDXRef-Package-go-module-github.com-huandu-xstrings-7b51bf0337947eee", "versionInfo": "v1.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:huandu:xstrings:v1.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/huandu/xstrings@v1.5.0"}]}, {"name": "github.com/iancoleman/strcase", "SPDXID": "SPDXRef-Package-go-module-github.com-iancoleman-strcase-8485f32cb554394e", "versionInfo": "v0.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:iancoleman:strcase:v0.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/iancoleman/strcase@v0.3.0"}]}, {"name": "github.com/in-toto/attestation", "SPDXID": "SPDXRef-Package-go-module-github.com-in-toto-attestation-df73c4980ae9eeda", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:in-toto:attestation:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:in_toto:attestation:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:in:attestation:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/in-toto/attestation@v1.2.0"}]}, {"name": "github.com/jbenet/go-context", "SPDXID": "SPDXRef-Package-go-module-github.com-jbenet-go-context-02177c275c48792e", "versionInfo": "v0.0.0-20150711004518-d14ea06fba99", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jbenet:go-context:v0.0.0-20150711004518-d14ea06fba99:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jbenet:go_context:v0.0.0-20150711004518-d14ea06fba99:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jbenet/go-context@v0.0.0-20150711004518-d14ea06fba99"}]}, {"name": "github.com/jinzhu/copier", "SPDXID": "SPDXRef-Package-go-module-github.com-jinzhu-copier-e4d4766289ac4d23", "versionInfo": "v0.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jinzhu:copier:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jinzhu/copier@v0.4.0"}]}, {"name": "github.com/jinzhu/inflection", "SPDXID": "SPDXRef-Package-go-module-github.com-jinzhu-inflection-ffc6e4b305e0f0a7", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jinzhu:inflection:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jinzhu/inflection@v1.0.0"}]}, {"name": "github.com/jinzhu/now", "SPDXID": "SPDXRef-Package-go-module-github.com-jinzhu-now-46d21d04ed75fe9b", "versionInfo": "v1.1.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jinzhu:now:v1.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jinzhu/now@v1.1.5"}]}, {"name": "github.com/json-iterator/go", "SPDXID": "SPDXRef-Package-go-module-github.com-json-iterator-go-849b898c5dee5b55", "versionInfo": "v1.1.12", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json-iterator:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json_iterator:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/json-iterator/go@v1.1.12"}]}, {"name": "github.com/kastenhq/goversion", "SPDXID": "SPDXRef-Package-go-module-github.com-kastenhq-goversion-fdcf81ff411c4c7c", "versionInfo": "v0.0.0-20230811215019-93b2f8823953", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:kastenhq:goversion:v0.0.0-20230811215019-93b2f8823953:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/kastenhq/goversion@v0.0.0-20230811215019-93b2f8823953"}]}, {"name": "github.com/kevinburke/ssh_config", "SPDXID": "SPDXRef-Package-go-module-github.com-kevinburke-ssh-config-9d4e5c11f65975ee", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:kevinburke:ssh-config:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:kevinburke:ssh_config:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/kevinburke/ssh_config@v1.2.0"}]}, {"name": "github.com/klauspost/compress", "SPDXID": "SPDXRef-Package-go-module-github.com-klauspost-compress-9cd2c161ed4f7383", "versionInfo": "v1.20.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:klauspost:compress:v1.20.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/klauspost/compress@v1.20.0"}]}, {"name": "github.com/klauspost/cpuid/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-klauspost-cpuid-v2-f36972a147f11ffa", "versionInfo": "v2.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:klauspost:cpuid\\/v2:v2.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/klauspost/cpuid@v2.3.0#v2"}]}, {"name": "github.com/klauspost/pgzip", "SPDXID": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-dbe863e4bdbc004b", "versionInfo": "v1.2.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:klauspost:pgzip:v1.2.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/klauspost/pgzip@v1.2.6"}]}, {"name": "github.com/knqyf263/go-apk-version", "SPDXID": "SPDXRef-Package-go-module-github.com-knqyf263-go-apk-version-b05939fcf2b6196c", "versionInfo": "v0.0.0-20200609155635-041fdbb8563f", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:knqyf263:go-apk-version:v0.0.0-20200609155635-041fdbb8563f:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:knqyf263:go_apk_version:v0.0.0-20200609155635-041fdbb8563f:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/knqyf263/go-apk-version@v0.0.0-20200609155635-041fdbb8563f"}]}, {"name": "github.com/knqyf263/go-deb-version", "SPDXID": "SPDXRef-Package-go-module-github.com-knqyf263-go-deb-version-cf9dc83015e1b8d7", "versionInfo": "v0.0.0-20241115132648-6f4aee6ccd23", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:knqyf263:go-deb-version:v0.0.0-20241115132648-6f4aee6ccd23:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:knqyf263:go_deb_version:v0.0.0-20241115132648-6f4aee6ccd23:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/knqyf263/go-deb-version@v0.0.0-20241115132648-6f4aee6ccd23"}]}, {"name": "github.com/lucasb-eyer/go-colorful", "SPDXID": "SPDXRef-Package-go-module-github.com-lucasb-eyer-go-colorful-4e29765e1c8e378a", "versionInfo": "v1.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb-eyer:go-colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb-eyer:go_colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb_eyer:go-colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb_eyer:go_colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb:go-colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb:go_colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/lucasb-eyer/go-colorful@v1.3.0"}]}, {"name": "github.com/masahiro331/go-mvn-version", "SPDXID": "SPDXRef-Package-go-module-github.com-masahiro331-go-mvn-version-b59537c387187cce", "versionInfo": "v0.0.0-20250131095131-f4974fa13b8a", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:masahiro331:go-mvn-version:v0.0.0-20250131095131-f4974fa13b8a:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:masahiro331:go_mvn_version:v0.0.0-20250131095131-f4974fa13b8a:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/masahiro331/go-mvn-version@v0.0.0-20250131095131-f4974fa13b8a"}]}, {"name": "github.com/mattn/go-colorable", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-efa2c5969ef840cc", "versionInfo": "v0.1.14", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-colorable:v0.1.14:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_colorable:v0.1.14:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-colorable@v0.1.14"}]}, {"name": "github.com/mattn/go-isatty", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-2885c1612f84aeeb", "versionInfo": "v0.0.24", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-isatty:v0.0.24:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_isatty:v0.0.24:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-isatty@v0.0.24"}]}, {"name": "github.com/mattn/go-runewidth", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-2d49ea55efd588d3", "versionInfo": "v0.0.21", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-runewidth:v0.0.21:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_runewidth:v0.0.21:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-runewidth@v0.0.21"}]}, {"name": "github.com/mgutz/ansi", "SPDXID": "SPDXRef-Package-go-module-github.com-mgutz-ansi-803688aaf5149e1e", "versionInfo": "v0.0.0-20200706080929-d51e80ef957d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mgutz:ansi:v0.0.0-20200706080929-d51e80ef957d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mgutz/ansi@v0.0.0-20200706080929-d51e80ef957d"}]}, {"name": "github.com/mholt/archives", "SPDXID": "SPDXRef-Package-go-module-github.com-mholt-archives-6ac0930d7638bde9", "versionInfo": "v0.1.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mholt:archives:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mholt/archives@v0.1.5"}]}, {"name": "github.com/mikelolasagasti/xz", "SPDXID": "SPDXRef-Package-go-module-github.com-mikelolasagasti-xz-ff8919a38538eb8d", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mikelolasagasti:xz:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mikelolasagasti/xz@v1.0.1"}]}, {"name": "github.com/minio/minlz", "SPDXID": "SPDXRef-Package-go-module-github.com-minio-minlz-5386fd495c6c2677", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:minio:minlz:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/minio/minlz@v1.0.1"}]}, {"name": "github.com/mitchellh/copystructure", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-ea1898b159775c0e", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:copystructure:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/copystructure@v1.2.0"}]}, {"name": "github.com/mitchellh/go-homedir", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-go-homedir-d61dc0ba9cc28254", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:go-homedir:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:go_homedir:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0"}]}, {"name": "github.com/mitchellh/go-wordwrap", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-85f4e102d50724ab", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:go-wordwrap:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:go_wordwrap:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1"}]}, {"name": "github.com/mitchellh/reflectwalk", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-4086e54e112438ae", "versionInfo": "v1.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:reflectwalk:v1.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/reflectwalk@v1.0.2"}]}, {"name": "github.com/moby/docker-image-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-9c22df4c1d35a71d", "versionInfo": "v1.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:docker-image-spec:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:docker_image_spec:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/docker-image-spec@v1.3.1"}]}, {"name": "github.com/moby/locker", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-locker-e08071f0563e71fe", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:locker:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/locker@v1.0.1"}]}, {"name": "github.com/moby/moby/api", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-moby-api-7d9894353ad2738d", "versionInfo": "v1.56.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:moby\\/api:v1.56.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/moby@v1.56.0#api"}]}, {"name": "github.com/moby/moby/client", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-moby-client-82f8ed5ceb12af1a", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:moby\\/client:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/moby@v0.6.0#client"}]}, {"name": "github.com/moby/sys/mountinfo", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-3f0c5e2c98725b03", "versionInfo": "v0.7.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/mountinfo:v0.7.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.7.2#mountinfo"}]}, {"name": "github.com/moby/sys/signal", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-signal-aad7bd6ecdf0ce10", "versionInfo": "v0.7.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/signal:v0.7.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.7.1#signal"}]}, {"name": "github.com/moby/sys/user", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-user-ea8fdfac8a89db68", "versionInfo": "v0.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/user:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.4.0#user"}]}, {"name": "github.com/moby/sys/userns", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-userns-f103bfd274996b4e", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/userns:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.1.0#userns"}]}, {"name": "github.com/modern-go/concurrent", "SPDXID": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-29cf604dc371b6ff", "versionInfo": "v0.0.0-20180306012644-bacd9c7ef1dd", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern-go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern_go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd"}]}, {"name": "github.com/modern-go/reflect2", "SPDXID": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-9462749502aa22d7", "versionInfo": "v1.0.3-0.20250322232337-35a7c28c31ee", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern-go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern_go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee"}]}, {"name": "github.com/muesli/ansi", "SPDXID": "SPDXRef-Package-go-module-github.com-muesli-ansi-b059c86e70e64f5d", "versionInfo": "v0.0.0-20230316100256-276c6243b2f6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:muesli:ansi:v0.0.0-20230316100256-276c6243b2f6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/muesli/ansi@v0.0.0-20230316100256-276c6243b2f6"}]}, {"name": "github.com/muesli/cancelreader", "SPDXID": "SPDXRef-Package-go-module-github.com-muesli-cancelreader-93ab69e4ef0e1c30", "versionInfo": "v0.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:muesli:cancelreader:v0.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/muesli/cancelreader@v0.2.2"}]}, {"name": "github.com/muesli/termenv", "SPDXID": "SPDXRef-Package-go-module-github.com-muesli-termenv-49bd8a42374175ae", "versionInfo": "v0.16.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:muesli:termenv:v0.16.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/muesli/termenv@v0.16.0"}]}, {"name": "github.com/nix-community/go-nix", "SPDXID": "SPDXRef-Package-go-module-github.com-nix-community-go-nix-10992e6d0052e3e9", "versionInfo": "v0.0.0-20250101154619-4bdde671e0a1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix-community:go-nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix-community:go_nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix_community:go-nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix_community:go_nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix:go-nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix:go_nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/nix-community/go-nix@v0.0.0-20250101154619-4bdde671e0a1"}]}, {"name": "github.com/nwaples/rardecode/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-nwaples-rardecode-v2-85c50e99369d0f00", "versionInfo": "v2.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nwaples:rardecode\\/v2:v2.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/nwaples/rardecode@v2.2.0#v2"}]}, {"name": "github.com/olekukonko/cat", "SPDXID": "SPDXRef-Package-go-module-github.com-olekukonko-cat-6ba8fb0898d6dd18", "versionInfo": "v0.0.0-20250911104152-50322a0618f6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:olekukonko:cat:v0.0.0-20250911104152-50322a0618f6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/olekukonko/cat@v0.0.0-20250911104152-50322a0618f6"}]}, {"name": "github.com/olekukonko/errors", "SPDXID": "SPDXRef-Package-go-module-github.com-olekukonko-errors-5e072495feb31932", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:olekukonko:errors:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/olekukonko/errors@v1.2.0"}]}, {"name": "github.com/olekukonko/ll", "SPDXID": "SPDXRef-Package-go-module-github.com-olekukonko-ll-dd7e5896e57f9035", "versionInfo": "v0.1.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:olekukonko:ll:v0.1.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/olekukonko/ll@v0.1.6"}]}, {"name": "github.com/olekukonko/tablewriter", "SPDXID": "SPDXRef-Package-go-module-github.com-olekukonko-tablewriter-356c63f97f4fd6e9", "versionInfo": "v1.1.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:olekukonko:tablewriter:v1.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/olekukonko/tablewriter@v1.1.4"}]}, {"name": "github.com/opencontainers/go-digest", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-4eb5ad212587f8c9", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:go-digest:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:go_digest:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0"}]}, {"name": "github.com/opencontainers/image-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-8c13777d8eca1d47", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:image-spec:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:image_spec:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1"}]}, {"name": "github.com/opencontainers/runtime-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-e6eac968d55b3c0e", "versionInfo": "v1.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime-spec:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime_spec:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/runtime-spec@v1.3.0"}]}, {"name": "github.com/openvex/go-vex", "SPDXID": "SPDXRef-Package-go-module-github.com-openvex-go-vex-5565059bb56f11f4", "versionInfo": "v0.2.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:openvex:go-vex:v0.2.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:openvex:go_vex:v0.2.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/openvex/go-vex@v0.2.8"}]}, {"name": "github.com/owenrumney/go-sarif", "SPDXID": "SPDXRef-Package-go-module-github.com-owenrumney-go-sarif-85f8b4ac1c0aeb01", "versionInfo": "v1.1.2-0.20231003122901-1000f5e05554", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:owenrumney:go-sarif:v1.1.2-0.20231003122901-1000f5e05554:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:owenrumney:go_sarif:v1.1.2-0.20231003122901-1000f5e05554:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/owenrumney/go-sarif@v1.1.2-0.20231003122901-1000f5e05554"}]}, {"name": "github.com/package-url/packageurl-go", "SPDXID": "SPDXRef-Package-go-module-github.com-package-url-packageurl-go-5009e51e4d89d17e", "versionInfo": "v0.1.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:package-url:packageurl-go:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:package-url:packageurl_go:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:package_url:packageurl-go:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:package_url:packageurl_go:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:package:packageurl-go:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:package:packageurl_go:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/package-url/packageurl-go@v0.1.5"}]}, {"name": "github.com/pandatix/go-cvss", "SPDXID": "SPDXRef-Package-go-module-github.com-pandatix-go-cvss-fcf1dbfe08c6d801", "versionInfo": "v0.6.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pandatix:go-cvss:v0.6.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pandatix:go_cvss:v0.6.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pandatix/go-cvss@v0.6.4"}]}, {"name": "github.com/pborman/indent", "SPDXID": "SPDXRef-Package-go-module-github.com-pborman-indent-86eefd4825f2f47a", "versionInfo": "v1.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pborman:indent:v1.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pborman/indent@v1.2.1"}]}, {"name": "github.com/pelletier/go-toml", "SPDXID": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-c184e76913d792e3", "versionInfo": "v1.9.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pelletier:go-toml:v1.9.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pelletier:go_toml:v1.9.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pelletier/go-toml@v1.9.5"}]}, {"name": "github.com/pelletier/go-toml/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-096c940afa984d56", "versionInfo": "v2.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pelletier:go-toml\\/v2:v2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pelletier:go_toml\\/v2:v2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pelletier/go-toml@v2.4.3#v2"}]}, {"name": "github.com/pierrec/lz4/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-b96f71f998409b56", "versionInfo": "v4.1.26", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pierrec:lz4\\/v4:v4.1.26:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pierrec/lz4@v4.1.26#v4"}]}, {"name": "github.com/piprate/json-gold", "SPDXID": "SPDXRef-Package-go-module-github.com-piprate-json-gold-7e2735597a6c1995", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:piprate:json-gold:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:piprate:json_gold:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/piprate/json-gold@v0.7.0"}]}, {"name": "github.com/pjbgf/sha1cd", "SPDXID": "SPDXRef-Package-go-module-github.com-pjbgf-sha1cd-61970a01a83b4f58", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pjbgf:sha1cd:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pjbgf/sha1cd@v0.6.0"}]}, {"name": "github.com/pkg/errors", "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-errors-9a09a111b14c8225", "versionInfo": "v0.9.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pkg/errors@v0.9.1"}]}, {"name": "github.com/pkg/profile", "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-profile-209e8e159042f6f3", "versionInfo": "v1.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pkg:profile:v1.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pkg/profile@v1.7.0"}]}, {"name": "github.com/pkg/xattr", "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-xattr-c705d5da8845259d", "versionInfo": "v0.4.12", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pkg:xattr:v0.4.12:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pkg/xattr@v0.4.12"}]}, {"name": "github.com/pquerna/cachecontrol", "SPDXID": "SPDXRef-Package-go-module-github.com-pquerna-cachecontrol-0fd6b6eaf5b54c0d", "versionInfo": "v0.0.0-20180517163645-1555304b9b35", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pquerna:cachecontrol:v0.0.0-20180517163645-1555304b9b35:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pquerna/cachecontrol@v0.0.0-20180517163645-1555304b9b35"}]}, {"name": "github.com/remyoudompheng/bigfft", "SPDXID": "SPDXRef-Package-go-module-github.com-remyoudompheng-bigfft-a7938ac6a8d2438e", "versionInfo": "v0.0.0-20230129092748-24d4a6f8daec", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:remyoudompheng:bigfft:v0.0.0-20230129092748-24d4a6f8daec:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/remyoudompheng/bigfft@v0.0.0-20230129092748-24d4a6f8daec"}]}, {"name": "github.com/rivo/uniseg", "SPDXID": "SPDXRef-Package-go-module-github.com-rivo-uniseg-6e232d02dd896744", "versionInfo": "v0.4.7", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rivo:uniseg:v0.4.7:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/rivo/uniseg@v0.4.7"}]}, {"name": "github.com/rust-secure-code/go-rustaudit", "SPDXID": "SPDXRef-Package-go-module-github.com-rust-secure-code-go-rustaudit-d0feed12929c7472", "versionInfo": "v0.0.0-20250226111315-e20ec32e963c", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust-secure-code:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust-secure-code:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust_secure_code:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust_secure_code:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust-secure:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust-secure:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust_secure:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust_secure:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/rust-secure-code/go-rustaudit@v0.0.0-20250226111315-e20ec32e963c"}]}, {"name": "github.com/sagikazarmark/locafero", "SPDXID": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-daf4a7040134301f", "versionInfo": "v0.11.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sagikazarmark:locafero:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sagikazarmark/locafero@v0.11.0"}]}, {"name": "github.com/saintfish/chardet", "SPDXID": "SPDXRef-Package-go-module-github.com-saintfish-chardet-9d8ea0e3753aa793", "versionInfo": "v0.0.0-20230101081208-5e3ef4b5456d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:saintfish:chardet:v0.0.0-20230101081208-5e3ef4b5456d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/saintfish/chardet@v0.0.0-20230101081208-5e3ef4b5456d"}]}, {"name": "github.com/santhosh-tekuri/jsonschema/v6", "SPDXID": "SPDXRef-Package-go-module-github.com-santhosh-tekuri-jsonschema-v6-96cbf3b038db71f1", "versionInfo": "v6.0.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:santhosh-tekuri:jsonschema\\/v6:v6.0.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:santhosh_tekuri:jsonschema\\/v6:v6.0.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:santhosh:jsonschema\\/v6:v6.0.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/santhosh-tekuri/jsonschema@v6.0.3#v6"}]}, {"name": "github.com/sassoftware/go-rpmutils", "SPDXID": "SPDXRef-Package-go-module-github.com-sassoftware-go-rpmutils-94c7b7363578a827", "versionInfo": "v0.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sassoftware:go-rpmutils:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sassoftware:go_rpmutils:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sassoftware/go-rpmutils@v0.4.0"}]}, {"name": "github.com/scylladb/go-set", "SPDXID": "SPDXRef-Package-go-module-github.com-scylladb-go-set-4d352891da965f64", "versionInfo": "v1.0.3-0.20200225121959-cc7b2070d91e", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:scylladb:go-set:v1.0.3-0.20200225121959-cc7b2070d91e:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:scylladb:go_set:v1.0.3-0.20200225121959-cc7b2070d91e:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/scylladb/go-set@v1.0.3-0.20200225121959-cc7b2070d91e"}]}, {"name": "github.com/sergi/go-diff", "SPDXID": "SPDXRef-Package-go-module-github.com-sergi-go-diff-2adfb12147b60c6b", "versionInfo": "v1.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sergi:go-diff:v1.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sergi:go_diff:v1.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sergi/go-diff@v1.4.0"}]}, {"name": "github.com/shopspring/decimal", "SPDXID": "SPDXRef-Package-go-module-github.com-shopspring-decimal-d589aeec3cde6d5e", "versionInfo": "v1.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:shopspring:decimal:v1.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/shopspring/decimal@v1.4.0"}]}, {"name": "github.com/sirupsen/logrus", "SPDXID": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-52ab0fb27f435389", "versionInfo": "v1.9.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sirupsen:logrus:v1.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sirupsen/logrus@v1.9.4"}]}, {"name": "github.com/skeema/knownhosts", "SPDXID": "SPDXRef-Package-go-module-github.com-skeema-knownhosts-64911e8660667937", "versionInfo": "v1.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:skeema:knownhosts:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/skeema/knownhosts@v1.3.1"}]}, {"name": "github.com/smallnest/ringbuffer", "SPDXID": "SPDXRef-Package-go-module-github.com-smallnest-ringbuffer-10a781e91b194892", "versionInfo": "v0.0.0-20241116012123-461381446e3d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:smallnest:ringbuffer:v0.0.0-20241116012123-461381446e3d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/smallnest/ringbuffer@v0.0.0-20241116012123-461381446e3d"}]}, {"name": "github.com/sorairolake/lzip-go", "SPDXID": "SPDXRef-Package-go-module-github.com-sorairolake-lzip-go-7e23ed655aac8c4c", "versionInfo": "v0.3.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sorairolake:lzip-go:v0.3.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sorairolake:lzip_go:v0.3.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sorairolake/lzip-go@v0.3.8"}]}, {"name": "github.com/sourcegraph/conc", "SPDXID": "SPDXRef-Package-go-module-github.com-sourcegraph-conc-b610f6093d90f584", "versionInfo": "v0.3.1-0.20240121214520-5f936abd7ae8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sourcegraph:conc:v0.3.1-0.20240121214520-5f936abd7ae8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sourcegraph/conc@v0.3.1-0.20240121214520-5f936abd7ae8"}]}, {"name": "github.com/spdx/gordf", "SPDXID": "SPDXRef-Package-go-module-github.com-spdx-gordf-db918073cad270bb", "versionInfo": "v0.0.0-20250128162952-000978ccd6fb", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spdx:gordf:v0.0.0-20250128162952-000978ccd6fb:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spdx/gordf@v0.0.0-20250128162952-000978ccd6fb"}]}, {"name": "github.com/spdx/tools-golang", "SPDXID": "SPDXRef-Package-go-module-github.com-spdx-tools-golang-03857efeba63785a", "versionInfo": "v0.6.0-rc4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spdx:tools-golang:v0.6.0-rc4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spdx:tools_golang:v0.6.0-rc4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spdx/tools-golang@v0.6.0-rc4"}]}, {"name": "github.com/spf13/afero", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-afero-b2a7e22827201ba8", "versionInfo": "v1.15.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:afero:v1.15.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/afero@v1.15.0"}]}, {"name": "github.com/spf13/cast", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-cast-efbd773a409aeb56", "versionInfo": "v1.10.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:cast:v1.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/cast@v1.10.0"}]}, {"name": "github.com/spf13/cobra", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-cobra-d3f8ee4ffbdeb36e", "versionInfo": "v1.10.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:cobra:v1.10.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/cobra@v1.10.2"}]}, {"name": "github.com/spf13/pflag", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-pflag-b03a3ffaa1d8f799", "versionInfo": "v1.0.10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:pflag:v1.0.10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/pflag@v1.0.10"}]}, {"name": "github.com/spf13/viper", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-viper-f27cd3efd3ed4f94", "versionInfo": "v1.21.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:viper:v1.21.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/viper@v1.21.0"}]}, {"name": "github.com/spiffe/go-spiffe/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-spiffe-go-spiffe-v2-835334c9e210045f", "versionInfo": "v2.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spiffe:go-spiffe\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spiffe:go_spiffe\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spiffe/go-spiffe@v2.7.0#v2"}]}, {"name": "github.com/subosito/gotenv", "SPDXID": "SPDXRef-Package-go-module-github.com-subosito-gotenv-57eaa019d15f9c90", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:subosito:gotenv:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/subosito/gotenv@v1.6.0"}]}, {"name": "github.com/sylabs/sif/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-84e4460d3b52c566", "versionInfo": "v2.24.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sylabs:sif\\/v2:v2.24.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sylabs/sif@v2.24.1#v2"}]}, {"name": "github.com/sylabs/squashfs", "SPDXID": "SPDXRef-Package-go-module-github.com-sylabs-squashfs-d98850668029f079", "versionInfo": "v1.0.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sylabs:squashfs:v1.0.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sylabs/squashfs@v1.0.6"}]}, {"name": "github.com/tailscale/hujson", "SPDXID": "SPDXRef-Package-go-module-github.com-tailscale-hujson-0624084c7c037b92", "versionInfo": "v0.0.0-20260302212456-ecc657c15afd", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tailscale:hujson:v0.0.0-20260302212456-ecc657c15afd:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/tailscale/hujson@v0.0.0-20260302212456-ecc657c15afd"}]}, {"name": "github.com/therootcompany/xz", "SPDXID": "SPDXRef-Package-go-module-github.com-therootcompany-xz-4c3e21dece5a3d4d", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:therootcompany:xz:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/therootcompany/xz@v1.0.1"}]}, {"name": "github.com/ulikunitz/xz", "SPDXID": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-8d9022dafc358585", "versionInfo": "v0.5.16", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ulikunitz:xz:v0.5.16:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/ulikunitz/xz@v0.5.16"}]}, {"name": "github.com/vbatts/go-mtree", "SPDXID": "SPDXRef-Package-go-module-github.com-vbatts-go-mtree-087fb1b66d450edf", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbatts:go-mtree:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbatts:go_mtree:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vbatts/go-mtree@v0.7.0"}]}, {"name": "github.com/vifraa/gopom", "SPDXID": "SPDXRef-Package-go-module-github.com-vifraa-gopom-d404aa5e0addb552", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vifraa:gopom:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vifraa/gopom@v1.0.0"}]}, {"name": "github.com/wagoodman/go-partybus", "SPDXID": "SPDXRef-Package-go-module-github.com-wagoodman-go-partybus-17a9db0e0d6075bf", "versionInfo": "v0.0.0-20230516145632-8ccac152c651", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:wagoodman:go-partybus:v0.0.0-20230516145632-8ccac152c651:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:wagoodman:go_partybus:v0.0.0-20230516145632-8ccac152c651:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/wagoodman/go-partybus@v0.0.0-20230516145632-8ccac152c651"}]}, {"name": "github.com/wagoodman/go-presenter", "SPDXID": "SPDXRef-Package-go-module-github.com-wagoodman-go-presenter-168f8e59cf1dd460", "versionInfo": "v0.0.0-20211015174752-f9c01afc824b", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:wagoodman:go-presenter:v0.0.0-20211015174752-f9c01afc824b:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:wagoodman:go_presenter:v0.0.0-20211015174752-f9c01afc824b:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/wagoodman/go-presenter@v0.0.0-20211015174752-f9c01afc824b"}]}, {"name": "github.com/wagoodman/go-progress", "SPDXID": "SPDXRef-Package-go-module-github.com-wagoodman-go-progress-a60ac791901a489e", "versionInfo": "v0.0.0-20260303201901-10176f79b2c0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:wagoodman:go-progress:v0.0.0-20260303201901-10176f79b2c0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:wagoodman:go_progress:v0.0.0-20260303201901-10176f79b2c0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/wagoodman/go-progress@v0.0.0-20260303201901-10176f79b2c0"}]}, {"name": "github.com/xanzy/ssh-agent", "SPDXID": "SPDXRef-Package-go-module-github.com-xanzy-ssh-agent-eaded4981ff20a09", "versionInfo": "v0.3.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:xanzy:ssh-agent:v0.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:xanzy:ssh_agent:v0.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/xanzy/ssh-agent@v0.3.3"}]}, {"name": "github.com/xi2/xz", "SPDXID": "SPDXRef-Package-go-module-github.com-xi2-xz-b47f284caf2ee05e", "versionInfo": "v0.0.0-20171230120015-48954b6210f8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:xi2:xz:v0.0.0-20171230120015-48954b6210f8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/xi2/xz@v0.0.0-20171230120015-48954b6210f8"}]}, {"name": "github.com/xo/terminfo", "SPDXID": "SPDXRef-Package-go-module-github.com-xo-terminfo-da5986f729d2b186", "versionInfo": "v0.0.0-20220910002029-abceb7e1c41e", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:xo:terminfo:v0.0.0-20220910002029-abceb7e1c41e:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/xo/terminfo@v0.0.0-20220910002029-abceb7e1c41e"}]}, {"name": "github.com/zclconf/go-cty", "SPDXID": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-38133ac19716a5be", "versionInfo": "v1.16.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zclconf:go-cty:v1.16.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zclconf:go_cty:v1.16.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/zclconf/go-cty@v1.16.3"}]}, {"name": "github.com/zyedidia/generic", "SPDXID": "SPDXRef-Package-go-module-github.com-zyedidia-generic-71339daa07d5b16a", "versionInfo": "v1.2.2-0.20230320175451-4410d2372cb1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zyedidia:generic:v1.2.2-0.20230320175451-4410d2372cb1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/zyedidia/generic@v1.2.2-0.20230320175451-4410d2372cb1"}]}, {"name": "go.etcd.io/bbolt", "SPDXID": "SPDXRef-Package-go-module-go.etcd.io-bbolt-e1e253dcb13764ff", "versionInfo": "v1.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.etcd.io/bbolt@v1.4.3"}]}, {"name": "go.opentelemetry.io/auto/sdk", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-4261642149e6e223", "versionInfo": "v1.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:auto:sdk:v1.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1"}]}, {"name": "go.opentelemetry.io/contrib/detectors/gcp", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-detectors-gcp-c6b55f2c3502a679", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contrib:detectors\\/gcp:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/detectors@v1.44.0#gcp"}]}, {"name": "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-231923fe32d1fad9", "versionInfo": "v0.68.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/google.golang.org\\/grpc\\/otelgrpc:v0.68.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation@v0.68.0#google.golang.org/grpc/otelgrpc"}]}, {"name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-98a867f7f9afb728", "versionInfo": "v0.68.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/otelhttp:v0.68.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation@v0.68.0#net/http/otelhttp"}]}, {"name": "go.opentelemetry.io/otel", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-8608c3e00128cb9c", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel@v1.44.0"}]}, {"name": "go.opentelemetry.io/otel/metric", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-d56c589c31a1a439", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:metric:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/metric@v1.44.0"}]}, {"name": "go.opentelemetry.io/otel/sdk", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-3fa2809212168442", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:sdk:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.44.0"}]}, {"name": "go.opentelemetry.io/otel/sdk/metric", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-eca691156e4ed326", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:sdk\\/metric:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.44.0#metric"}]}, {"name": "go.opentelemetry.io/otel/trace", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-101e2c578ca9d1ed", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:trace:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/trace@v1.44.0"}]}, {"name": "go.yaml.in/yaml/v3", "SPDXID": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-92a51c05ef2fe0b7", "versionInfo": "v3.0.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml:v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.yaml.in/yaml/v3@v3.0.5"}]}, {"name": "go4.org", "SPDXID": "SPDXRef-Package-go-module-go4.org-4ed8aa31b900d501", "versionInfo": "v0.0.0-20230225012048-214862532bf5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go4.org@v0.0.0-20230225012048-214862532bf5"}]}, {"name": "golang.org/x/crypto", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-crypto-4647097880112783", "versionInfo": "v0.56.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:ssh:v0.56.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/crypto@v0.56.0"}]}, {"name": "golang.org/x/exp", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-exp-afd186f203b2c920", "versionInfo": "v0.0.0-20260410095643-746e56fc9e2f", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/exp:v0.0.0-20260410095643-746e56fc9e2f:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/exp@v0.0.0-20260410095643-746e56fc9e2f"}]}, {"name": "golang.org/x/mod", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-mod-5a5a281bf6ed373f", "versionInfo": "v0.41.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/mod:v0.41.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/mod@v0.41.0"}]}, {"name": "golang.org/x/net", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-net-84b13f8b8fabc678", "versionInfo": "v0.58.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:networking:v0.58.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/net@v0.58.0"}]}, {"name": "golang.org/x/oauth2", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-oauth2-ace2f37ad59aca35", "versionInfo": "v0.36.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/oauth2:v0.36.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/oauth2@v0.36.0"}]}, {"name": "golang.org/x/sync", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sync-9e58cceec8176db0", "versionInfo": "v0.22.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sync:v0.22.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sync@v0.22.0"}]}, {"name": "golang.org/x/sys", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sys-d45b168fafbcdf09", "versionInfo": "v0.47.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sys:v0.47.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sys@v0.47.0"}]}, {"name": "golang.org/x/term", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-term-bdd9a3bb99d412dd", "versionInfo": "v0.45.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/term:v0.45.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/term@v0.45.0"}]}, {"name": "golang.org/x/text", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-text-29c9568dc1219a6b", "versionInfo": "v0.41.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:text:v0.41.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/text@v0.41.0"}]}, {"name": "golang.org/x/time", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-time-325a6cda1d9f9762", "versionInfo": "v0.16.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/time:v0.16.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/time@v0.16.0"}]}, {"name": "golang.org/x/tools", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-tools-ee25b22649e525aa", "versionInfo": "v0.49.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/tools:v0.49.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/tools@v0.49.0"}]}, {"name": "golang.org/x/xerrors", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-xerrors-b426ddd369b78004", "versionInfo": "v0.0.0-20240903120638-7835f813f4da", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/xerrors:v0.0.0-20240903120638-7835f813f4da:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/xerrors@v0.0.0-20240903120638-7835f813f4da"}]}, {"name": "google.golang.org/api", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-api-2c7803bf8d41d2ed", "versionInfo": "v0.294.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:api:v0.294.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/api@v0.294.0"}]}, {"name": "google.golang.org/genproto", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-c4aa28c0bab1c7fe", "versionInfo": "v0.0.0-20260715232425-e75dac1f907d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260715232425-e75dac1f907d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto@v0.0.0-20260715232425-e75dac1f907d"}]}, {"name": "google.golang.org/genproto/googleapis/api", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-c4357a402179b1d8", "versionInfo": "v0.0.0-20260715232425-e75dac1f907d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260715232425-e75dac1f907d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260715232425-e75dac1f907d#api"}]}, {"name": "google.golang.org/genproto/googleapis/rpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-9e455a5874229c0e", "versionInfo": "v0.0.0-20260819154853-08b0e4226688", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260819154853-08b0e4226688:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260819154853-08b0e4226688#rpc"}]}, {"name": "google.golang.org/grpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-grpc-a0ea6b899ab38a0c", "versionInfo": "v1.83.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:grpc:v1.83.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/grpc@v1.83.2"}]}, {"name": "google.golang.org/protobuf", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-protobuf-f80c5e0d70823c1a", "versionInfo": "v1.36.12", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:protobuf:v1.36.12:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/protobuf@v1.36.12"}]}, {"name": "gopkg.in/warnings.v0", "SPDXID": "SPDXRef-Package-go-module-gopkg.in-warnings.v0-97ac151894b5c641", "versionInfo": "v0.1.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/gopkg.in/warnings.v0@v0.1.2"}]}, {"name": "gopkg.in/yaml.v3", "SPDXID": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-8d7166932605a8fa", "versionInfo": "v3.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml_project:yaml:v3.0.1:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/gopkg.in/yaml.v3@v3.0.1"}]}, {"name": "gorm.io/gorm", "SPDXID": "SPDXRef-Package-go-module-gorm.io-gorm-51b148e9577e7fa3", "versionInfo": "v1.31.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/gorm.io/gorm@v1.31.2"}]}, {"name": "grype", "SPDXID": "SPDXRef-Package-rpm-grype-acff62daee366b39", "versionInfo": "0.119.0-0.2.hum1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from RPM DB: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grype:grype:0.119.0-0.2.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/hummingbird/grype@0.119.0-0.2.hum1?distro=hummingbird-1"}]}, {"name": "howett.net/plist", "SPDXID": "SPDXRef-Package-go-module-howett.net-plist-fa4f2002d66d6993", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/howett.net/plist@v1.0.1"}]}, {"name": "modernc.org/libc", "SPDXID": "SPDXRef-Package-go-module-modernc.org-libc-8b07475c1530d62c", "versionInfo": "v1.75.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/modernc.org/libc@v1.75.6"}]}, {"name": "modernc.org/mathutil", "SPDXID": "SPDXRef-Package-go-module-modernc.org-mathutil-9f243161fa75f8b9", "versionInfo": "v1.7.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/modernc.org/mathutil@v1.7.1"}]}, {"name": "modernc.org/memory", "SPDXID": "SPDXRef-Package-go-module-modernc.org-memory-311d693ee04928eb", "versionInfo": "v1.12.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/modernc.org/memory@v1.12.1"}]}, {"name": "modernc.org/sqlite", "SPDXID": "SPDXRef-Package-go-module-modernc.org-sqlite-e8e324b6634ac9c0", "versionInfo": "v1.58.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/modernc.org/sqlite@v1.58.0"}]}, {"name": "stdlib", "SPDXID": "SPDXRef-Package-go-module-stdlib-765c93b72a178fff", "versionInfo": "go1.27.2-X:nodwarf5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/grype", "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:go:1.27.2:-:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/stdlib@1.27.2-X%3Anodwarf5"}]}, {"name": "rpm-extracted/grype-0.119.0-0.2.hum1.x86_64", "SPDXID": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "grype", "SPDXID": "SPDXRef-Package-rpm-grype-78208d9a57e7909e", "versionInfo": "0.119.0-0.2.hum1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from RPM DB: /usr/lib/debug/usr/bin/grype-0.119.0-0.2.hum1.x86_64.debug", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:grype:grype:0.119.0-0.2.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/hummingbird/grype@0.119.0-0.2.hum1?distro=hummingbird-1"}]}, {"name": "rpm-extracted/grype-debuginfo-0.119.0-0.2.hum1.x86_64", "SPDXID": "SPDXRef-Directory-Root-grype-debuginfo-0.119.0-0.2.hum1.x86-64", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "rpm-extracted/grype-debugsource-0.119.0-0.2.hum1.x86_64", "SPDXID": "SPDXRef-Directory-Root-grype-debugsource-0.119.0-0.2.hum1.x86-64", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}], "files": [{"fileName": "usr/bin/grype", "SPDXID": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "fileTypes": ["APPLICATION", "BINARY"], "checksums": [{"algorithm": "SHA1", "checksumValue": "05acfdc0c4bbd999e4d57b5d894238fb4ffd505f"}, {"algorithm": "SHA256", "checksumValue": "567723bffeeb820555c6ced1c07216c41b0c757bcc1bc3bf70592554097a3883"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "go.mod", "SPDXID": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "a28e1bb79a7943a4423f8841f3613e612f0442c5"}, {"algorithm": "SHA256", "checksumValue": "55dcebbf99c98ecfd8ead7bb622fdc90c6004d535e54f3ec60e5e2118c151d0b"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "grype-0.119.0/.github/actions/bootstrap/action.yaml", "SPDXID": "SPDXRef-File-....github-actions-bootstrap-action.yaml-e931ab2019105f09", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "454633c9ef620f6b007c16b3f80c253968e4b601"}, {"algorithm": "SHA256", "checksumValue": "4f31cba86c71b2d6ce7b86bf98b22be4d0d23995a6a237c5acc3e4d1f73a8a70"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "grype-0.119.0/.github/workflows/codeql.yaml", "SPDXID": "SPDXRef-File-....github-workflows-codeql.yaml-45e4c3abdccec846", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "a04dc412b6e349ed176b5a78fccd984d3ee310c3"}, {"algorithm": "SHA256", "checksumValue": "c989fd33786192726686399df77095a9bfae3ed625a2705d3782c548e97e4f85"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "grype-0.119.0/.github/workflows/release.yaml", "SPDXID": "SPDXRef-File-....github-workflows-release.yaml-d103172c0041c1c4", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "d0f4100fc6c547dbf182c5dea5397fded640a6dd"}, {"algorithm": "SHA256", "checksumValue": "0c987a81c26f76dfa565811c209a4c949b0b7499836ef425bcc48628e0f0f3ec"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "grype-0.119.0/.github/workflows/scorecards.yaml", "SPDXID": "SPDXRef-File-....github-workflows-scorecards.yaml-e6aaf1d12fce76fe", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "ca118ea43d9cd964725e26eef5e2aee29afde32d"}, {"algorithm": "SHA256", "checksumValue": "20c68931a1f3b34868c1f88fa5082cebebf8730aa07e46223ff209581927832a"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "grype-0.119.0/.github/workflows/validate-github-actions.yaml", "SPDXID": "SPDXRef-File-...workflows-validate-github-actions.yaml-e17b422c5008a06c", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "edb1be17f746724125e51bc7bf0c3bb1578739d2"}, {"algorithm": "SHA256", "checksumValue": "d2bd4276c5d6aeb6cabf002aa5f29f8df174f228a564b938c04e5e5891f7dbe4"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "grype-0.119.0/.github/workflows/validations.yaml", "SPDXID": "SPDXRef-File-....github-workflows-validations.yaml-ad929689d169a6c9", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "4c6d64f72480b982823450c74b71b059ab478722"}, {"algorithm": "SHA256", "checksumValue": "96e8d1832a9d97b2d5f2033204e39e49064045e21f224898ce6b0a9d5729302e"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "grype-0.119.0/.make/go.mod", "SPDXID": "SPDXRef-File-grype-0.119.0-.make-go.mod-f5109dc18f6da530", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "59dfd62887dcc37ac45b630cd45504af69922838"}, {"algorithm": "SHA256", "checksumValue": "14ca0322c5ae90e092519494fea19f6396a7c78a244b70db632802a76270871d"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "grype-0.119.0/go.mod", "SPDXID": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "a28e1bb79a7943a4423f8841f3613e612f0442c5"}, {"algorithm": "SHA256", "checksumValue": "55dcebbf99c98ecfd8ead7bb622fdc90c6004d535e54f3ec60e5e2118c151d0b"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "grype-0.119.0/grype/distro/testdata/os/busybox/bin/busybox", "SPDXID": "SPDXRef-File-...distro-testdata-os-busybox-bin-busybox-210dd1c29da0b37f", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "d55fed17a3f1d0d1f0a01d5aa809c0c2d6a26a71"}, {"algorithm": "SHA256", "checksumValue": "f0431c5480b17065fcf6a960323f6d61c5e2455174394cd547660a1674773ed1"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "grype-0.119.0/grype/matcher/golang/testdata/gobin-xnet-html/go.mod", "SPDXID": "SPDXRef-File-...golang-testdata-gobin-xnet-html-go.mod-430658a3eb617e32", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "7784be4e2dccaba49469c63a938b160b158b498f"}, {"algorithm": "SHA256", "checksumValue": "4e1fc673faa8fc92ee9cee014810df27564655d9a1099dc962e38d5c7f7e8f0d"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "grype-0.119.0/grype/matcher/golang/testdata/gobin-xnet-http2server/go.mod", "SPDXID": "SPDXRef-File-...testdata-gobin-xnet-http2server-go.mod-b08c253cc83d6f82", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "0610eff1ca7da3ee2b81e1d84ff68b371abd4831"}, {"algorithm": "SHA256", "checksumValue": "5ee3281107e48af0086f17fed63dafaa39e0f434dc3f249d7591232c16332e4d"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "grype-0.119.0/test/integration/testdata/image-alpine-match-coverage/lib/apk/db/installed", "SPDXID": "SPDXRef-File-...lib-apk-db-installed-4ee5bd663f018994", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "560f39f6cb742d39450c91b8a0890dabf3ce18a6"}, {"algorithm": "SHA256", "checksumValue": "667b793152df6588e126d69b8c9a20aa70fc50a295f624f5919dcc131c8766d0"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "grype-0.119.0/test/integration/testdata/image-centos-match-coverage/var/lib/rpm/Packages", "SPDXID": "SPDXRef-File-...var-lib-rpm-Packages-1399863a198cbc98", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "c28cd9c4f7f6c6974b6323c3111cb493f5377397"}, {"algorithm": "SHA256", "checksumValue": "b1fe275b2bbaf1b0c081249e167d9d453a347fda3897a8d9c7adb21cb2a9d871"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "grype-0.119.0/test/integration/testdata/image-debian-match-coverage/dotnet/TestLibrary.deps.json", "SPDXID": "SPDXRef-File-...dotnet-TestLibrary.deps.json-3106215bcb53f2d1", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "15e6987530b524e4d38f63ec1f9682c6e0032906"}, {"algorithm": "SHA256", "checksumValue": "b4b50d90c3a4b42ec077000eb6a8b6b5cf8b7b6e9f28d147797a2ecd8c514edd"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "grype-0.119.0/test/integration/testdata/image-debian-match-coverage/golang/go.mod", "SPDXID": "SPDXRef-File-...golang-go.mod-5ece918845b351cc", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "d21fc7bd0552cbdefc73b795a477454baea6cbb0"}, {"algorithm": "SHA256", "checksumValue": "8783b8d952bda05fce1d6ae3bc3ad0f330b6d6492d570121c8bca16543e8ae0e"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "grype-0.119.0/test/integration/testdata/image-debian-match-coverage/haskell/cabal.project.freeze", "SPDXID": "SPDXRef-File-...haskell-cabal.project.freeze-e33aa1a403ab8fd4", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "ca99d52eb43313e77505aa32cb2b284178d28f6b"}, {"algorithm": "SHA256", "checksumValue": "ada55f8b74beaad0038e08b1881268e9e2ca7a130f3b0e17ee757278a5611a22"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "grype-0.119.0/test/integration/testdata/image-debian-match-coverage/haskell/stack.yaml", "SPDXID": "SPDXRef-File-...haskell-stack.yaml-a0328ff80d56d97d", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "d42967e527c4d54c25ee1a582ea05851dd12a3bd"}, {"algorithm": "SHA256", "checksumValue": "436c5e6d78f906bb12bfde7d32071ec228226862b8f30be90c4bd0147f501b74"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "grype-0.119.0/test/integration/testdata/image-debian-match-coverage/haskell/stack.yaml.lock", "SPDXID": "SPDXRef-File-...haskell-stack.yaml.lock-ba4762468992c29c", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "d36a7d90a58dcb1dda306dfb0ff719a853d6a7e1"}, {"algorithm": "SHA256", "checksumValue": "43f6c48ca5ec8bf0df83a54bf7309f2d3e201306c5f46b269b3a244c776b6b08"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "grype-0.119.0/test/integration/testdata/image-debian-match-coverage/hex/mix.lock", "SPDXID": "SPDXRef-File-...hex-mix.lock-f2297cbda47fc1a8", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "bd323c07ec0943939a89d53779a5bfc52c51c296"}, {"algorithm": "SHA256", "checksumValue": "2e78e817ec7f841f3d734fafde6d6b530f2543ba51f9845c638bc29800a466d6"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "grype-0.119.0/test/integration/testdata/image-debian-match-coverage/java/example-java-app-maven-0.1.0.jar", "SPDXID": "SPDXRef-File-...java-example-java-app-maven-0.1.0.jar-5abe306439090291", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "100b566a7dcdb187bf9f14ecd96427cadd535bfe"}, {"algorithm": "SHA256", "checksumValue": "93e3cea225b18e08da7891f79fc4bc7642903940023698d9b4dc93b94b340873"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "grype-0.119.0/test/integration/testdata/image-debian-match-coverage/python/dist-info/METADATA", "SPDXID": "SPDXRef-File-...python-dist-info-METADATA-7401f466c67cd18f", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "b9fcc8d9d444553d194a12276217973a3b7f317f"}, {"algorithm": "SHA256", "checksumValue": "f2f7f141a38f2fc7164b9d535e8bbc2d036c9d639196300800bc15b5c5bf11e7"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "grype-0.119.0/test/integration/testdata/image-debian-match-coverage/python/dist-info/top_level.txt", "SPDXID": "SPDXRef-File-...python-dist-info-top-level.txt-6978cb1601d8a1bd", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "0a4e82482a9bff170c78fbc3c3e08704e84afcb2"}, {"algorithm": "SHA256", "checksumValue": "2891ee72f7ae8b1e78fb55278806d057ff7c059886b166403df203f2537d9557"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "grype-0.119.0/test/integration/testdata/image-debian-match-coverage/ruby/Gemfile.lock", "SPDXID": "SPDXRef-File-...ruby-Gemfile.lock-225207f840865b95", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "231d8da0c64c18dbc92a97bf75202cd70eb5bd7a"}, {"algorithm": "SHA256", "checksumValue": "21468b8ce24c95de449ab5a9ff02b6553233adef1cdab43bfe8e1ed0366e1d24"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "grype-0.119.0/test/integration/testdata/image-debian-match-coverage/ruby/specifications/bundler.gemspec", "SPDXID": "SPDXRef-File-...ruby-specifications-bundler.gemspec-3dd72292b1f1be47", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "e1e7dd75fbf56df7c6ecceedf24a57089bc47c68"}, {"algorithm": "SHA256", "checksumValue": "d61f907db658ae526816e0b31bbb5b5b7cbaa31c032836fa00864aeacba9444a"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "grype-0.119.0/test/integration/testdata/image-debian-match-coverage/var/lib/dpkg/status", "SPDXID": "SPDXRef-File-...var-lib-dpkg-status-1d0b9e626ff2dfe2", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "7c2fea091f4c83b2c43b0a7fe269c9f9a0d2f61b"}, {"algorithm": "SHA256", "checksumValue": "9df7f131bb64e646961607ad8fff2c40ac50966d22d61e1263f8e1090c4f5197"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "grype-0.119.0/test/integration/testdata/image-jvm-match-coverage/opt/java/openjdk/release", "SPDXID": "SPDXRef-File-...opt-java-openjdk-release-b32bc18bc276b117", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "33c454af9106aac0263836c701972468f9b2d07f"}, {"algorithm": "SHA256", "checksumValue": "5948d36a24c3a6d1ba79dfa0ca31d5ac5330e653533e48ecc4b499ff1b8a6481"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "grype-0.119.0/test/integration/testdata/image-portage-match-coverage/var/db/pkg/app-containers/skopeo-1.5.1/CONTENTS", "SPDXID": "SPDXRef-File-...app-containers-skopeo-1.5.1-CONTENTS-c8ec35482567bbaa", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "26cd1c44d4cd8879eb94e5afeccd847c9e07d610"}, {"algorithm": "SHA256", "checksumValue": "1f5d9f74e98857b9f06cbf56861c6a6b2814eb1c5b5a6d3d471b9bc16cd98064"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "grype-0.119.0/test/integration/testdata/image-portage-match-coverage/var/db/pkg/app-containers/skopeo-1.5.1/LICENSE", "SPDXID": "SPDXRef-File-...app-containers-skopeo-1.5.1-LICENSE-39b635b71a393a95", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "cd113a952ee11f4a1e1927cea1bed78a8f7e30f9"}, {"algorithm": "SHA256", "checksumValue": "933ed3cb9e276d368dab55ed3c16cdeb655b7a88cfef109d10cb576e7b0ef897"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "grype-0.119.0/test/integration/testdata/image-portage-match-coverage/var/db/pkg/app-containers/skopeo-1.5.1/SIZE", "SPDXID": "SPDXRef-File-...pkg-app-containers-skopeo-1.5.1-SIZE-697381618c2cc012", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "dd5c0d0cced58a17c3b29e4babc70fbfc19174e5"}, {"algorithm": "SHA256", "checksumValue": "e92c3105bf4c33f4e2ad82f6801d121397fa06de7ba2b2b0836b436f41aa89a9"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "grype-0.119.0/test/integration/testdata/image-sles-match-coverage/var/lib/rpm/Packages", "SPDXID": "SPDXRef-File-...var-lib-rpm-Packages-9ce3e68ca9f76e04", "fileTypes": ["APPLICATION"], "checksums": [{"algorithm": "SHA1", "checksumValue": "c28cd9c4f7f6c6974b6323c3111cb493f5377397"}, {"algorithm": "SHA256", "checksumValue": "b1fe275b2bbaf1b0c081249e167d9d453a347fda3897a8d9c7adb21cb2a9d871"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "grype-0.119.0/test/quality/requirements.txt", "SPDXID": "SPDXRef-File-...test-quality-requirements.txt-ded6f74ec82f3199", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "3b1aeb3fe7d64385dcc9d1944d6a095478b4a696"}, {"algorithm": "SHA256", "checksumValue": "b5dacfce24f33ece67a98568a2ecfb6768c50ec87148bea0954e44e8f6c3a6f9"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "vendor/go.opentelemetry.io/otel/requirements.txt", "SPDXID": "SPDXRef-File-...otel-requirements.txt-b69fd806af1e91ad", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "caa1c2b45eb780dafb1d51f1af54467690a3e576"}, {"algorithm": "SHA256", "checksumValue": "5870c83413e8bee660f619ac3c8b4f3bdd41a9b347e700530f3d675af3e2d483"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/lib/debug/usr/bin/grype-0.119.0-0.2.hum1.aarch64.debug", "SPDXID": "SPDXRef-File-...grype-0.119.0-0.2.hum1.aarch64.debug-37090b8069b66983", "fileTypes": ["APPLICATION", "BINARY"], "checksums": [{"algorithm": "SHA1", "checksumValue": "71957c26c1fa4203bcd8d0a9dae9f3e13106591a"}, {"algorithm": "SHA256", "checksumValue": "608c341759e6f7126865561664de76aa7dab73517cd29cc9139ff8279d2450ac"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/bin/grype", "SPDXID": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "fileTypes": ["APPLICATION", "BINARY"], "checksums": [{"algorithm": "SHA1", "checksumValue": "1ee4e9426688b239f19d9b7b3cd45197da07a68b"}, {"algorithm": "SHA256", "checksumValue": "0d9e390516f747c8f559b0f68a753e3a1fddf3d0262b02f33647fb1211de0b18"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/lib/debug/usr/bin/grype-0.119.0-0.2.hum1.s390x.debug", "SPDXID": "SPDXRef-File-...bin-grype-0.119.0-0.2.hum1.s390x.debug-7639c6f0e48ac4a0", "fileTypes": ["APPLICATION", "BINARY"], "checksums": [{"algorithm": "SHA1", "checksumValue": "3d146cb58a42398aec13a6d89269600b04689d50"}, {"algorithm": "SHA256", "checksumValue": "86c407279e8049958c1173a0029eddc1e498624e139775737ba0adf477b6c755"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/bin/grype", "SPDXID": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "fileTypes": ["APPLICATION", "BINARY"], "checksums": [{"algorithm": "SHA1", "checksumValue": "15cd14afa4c3dbbedd8024849b2abd0c6b2c34cf"}, {"algorithm": "SHA256", "checksumValue": "70548eae51fdae5d65d6434312c935c0b52f7d29362eae521eab369f1e77c3c5"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/lib/debug/usr/bin/grype-0.119.0-0.2.hum1.x86_64.debug", "SPDXID": "SPDXRef-File-...grype-0.119.0-0.2.hum1.x86-64.debug-30a11f9c3ce310d3", "fileTypes": ["APPLICATION", "BINARY"], "checksums": [{"algorithm": "SHA1", "checksumValue": "91e08a12c2ff4c3f0520bce6a536bf0ec7a73a05"}, {"algorithm": "SHA256", "checksumValue": "1b8526e5900cdfc85f5d4e42448d82498c9ec6911d119b5b0a3fc81566500888"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}], "relationships": [{"spdxElementId": "SPDXRef-DOCUMENT", "relationshipType": "DESCRIBES", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-aarch64-grype", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-s390x-grype", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-x86-64-grype", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-aarch64-grype-debuginfo", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-s390x-grype-debuginfo", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-x86-64-grype-debuginfo", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-aarch64-grype-debugsource", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-s390x-grype-debugsource", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-x86-64-grype-debugsource", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source0"}, {"spdxElementId": "SPDXRef-Source0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Source0-origin"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source1"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source2"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-R-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-add-determinism-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-alternatives-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-annobin-docs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-annobin-plugin-gcc-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ansible-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-askalono-cli-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-audit-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bash-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-binutils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-build-reproducibility-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bzip2-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bzip2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ca-certificates-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cmake-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-coreutils-common-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-coreutils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cpio-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cpp-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-crypto-policies-config-default-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-crypto-policies-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-curl-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cyrus-sasl-lib-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-debugedit-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-diffutils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-dwz-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ed-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-efi-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-debuginfod-client-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-libelf-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-erlang-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-expat-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-file-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-filesystem-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-filesystem-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-file-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-findutils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-fonts-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-forge-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-fpc-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gap-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gawk-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gcc-plugin-annobin-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gcc-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gdb-minimal-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gdbm-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ghc-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-common-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-gconv-extra-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-minimal-langpack-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gmp-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnat-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnome-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnulib-l10n-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-dirmngr-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-gpg-agent-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-gpgconf-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-keyboxd-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-verify-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnutls-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-filesystem-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-rpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-vendor-tools-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-bin-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-src-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golist-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gpgverify-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-grep-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gzip-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-gpg-keys-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-release-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-repos-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ima-evm-utils-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-info-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-jansson-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-java-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-json-c-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-kernel-headers-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-kernel-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-keyutils-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-krb5-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libacl-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libarchive-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libasan-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libassuan-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libatomic-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libattr-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libblkid-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libbrotli-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcap-ng-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcap-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcbor-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcom-err-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcurl-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libeconf-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libevent-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfdisk-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libffi-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfido2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfsverity-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgcc-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgcrypt-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgomp-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgpg-error-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libidn2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libksba-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-liblastlog2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libmount-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libmpc-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnghttp2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnghttp3-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpfm-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpkgconf-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpsl-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libselinux-utils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libselinux-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsemanage-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsepol-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsmartcols-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libssh-config-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libssh-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libstdc++-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtasn1-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtool-ltdl-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libubsan-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libunistring-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libusb1-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libuuid-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libverto-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxcrypt-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxcrypt-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxml2-16-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libzstd-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-linkdupes-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lua-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lua-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lz4-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-make-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-meson-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-mpdecimal-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-mpfr-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ncurses-base-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ncurses-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-nettle-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ngtcp2-crypto-ossl-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ngtcp2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-npth-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ocaml-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openblas-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openldap-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssl-fips-provider-upstream-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssl-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-p11-kit-trust-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-p11-kit-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-package-notes-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pam-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-patch-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-syntax-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-perl-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-m4-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-pkg-config-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-policycoreutils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-popt-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-publicsuffix-list-dafsa-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pyproject-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python-pip-wheel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-boolean.py-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-license-expression-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-qt5-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-qt6-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-readline-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-redhat-rpm-config-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-build-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-build-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-plugin-selinux-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-sequoia-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-sign-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rust-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sed-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-selinux-policy-targeted-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-selinux-policy-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-setup-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-shadow-utils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sqlite-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-standalone-sysusers-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tar-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tpm2-tss-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tree-sitter-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tzdata-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-unzip-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-util-linux-core-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-util-linux-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-which-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xxhash-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xz-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xz-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zig-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zip-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zlib-ng-compat-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zstd-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-aarch64-grype"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-aarch64-grype-debuginfo"}, {"spdxElementId": "SPDXRef-Buildroot-grype-aarch64", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-aarch64-grype-debugsource"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-R-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-add-determinism-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-alternatives-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-annobin-docs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-annobin-plugin-gcc-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ansible-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-askalono-cli-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-audit-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bash-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-binutils-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-build-reproducibility-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bzip2-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bzip2-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ca-certificates-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cmake-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-coreutils-common-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-coreutils-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cpio-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cpp-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-crypto-policies-config-default-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-crypto-policies-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-curl-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cyrus-sasl-lib-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-debugedit-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-diffutils-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-dwz-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ed-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-efi-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-debuginfod-client-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-libelf-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-erlang-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-expat-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-file-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-filesystem-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-filesystem-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-file-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-findutils-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-fonts-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-forge-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-fpc-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gap-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gawk-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gcc-plugin-annobin-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gcc-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gdb-minimal-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gdbm-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ghc-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-common-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-devel-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-gconv-extra-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-minimal-langpack-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gmp-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnat-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnome-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnulib-l10n-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-dirmngr-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-gpg-agent-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-gpgconf-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-keyboxd-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-verify-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnutls-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-filesystem-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-rpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-vendor-tools-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-bin-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-src-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golist-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gpgverify-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-grep-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gzip-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-gpg-keys-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-release-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-repos-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ima-evm-utils-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-info-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-jansson-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-java-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-json-c-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-kernel-headers-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-kernel-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-keyutils-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-krb5-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libacl-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libarchive-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libasan-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libassuan-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libatomic-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libattr-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libblkid-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libbrotli-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcap-ng-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcap-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcbor-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcom-err-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcurl-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libeconf-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libevent-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfdisk-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libffi-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfido2-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfsverity-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgcc-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgcrypt-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgomp-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgpg-error-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libidn2-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libksba-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-liblastlog2-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libmount-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libmpc-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnghttp2-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnghttp3-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpkgconf-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpsl-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libselinux-utils-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libselinux-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsemanage-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsepol-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsmartcols-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libssh-config-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libssh-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libstdc++-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtasn1-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtool-ltdl-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libubsan-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libunistring-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libusb1-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libuuid-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libverto-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxcrypt-devel-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxcrypt-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxml2-16-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libzstd-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-linkdupes-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lua-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lua-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lz4-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-make-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-meson-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-mpdecimal-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-mpfr-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ncurses-base-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ncurses-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-nettle-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ngtcp2-crypto-ossl-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ngtcp2-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-npth-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ocaml-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openblas-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openldap-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssl-fips-provider-upstream-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssl-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-p11-kit-trust-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-p11-kit-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-package-notes-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pam-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-patch-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-syntax-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-perl-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-m4-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-pkg-config-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-policycoreutils-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-popt-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-publicsuffix-list-dafsa-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pyproject-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python-pip-wheel-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-boolean.py-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-license-expression-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-qt5-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-qt6-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-readline-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-redhat-rpm-config-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-build-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-build-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-plugin-selinux-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-sequoia-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-sign-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rust-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sed-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-selinux-policy-targeted-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-selinux-policy-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-setup-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-shadow-utils-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sqlite-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-standalone-sysusers-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tar-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tpm2-tss-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tree-sitter-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tzdata-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-unzip-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-util-linux-core-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-util-linux-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-which-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xxhash-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xz-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xz-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zig-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zip-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zlib-ng-compat-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zstd-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-s390x-grype"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-s390x-grype-debuginfo"}, {"spdxElementId": "SPDXRef-Buildroot-grype-s390x", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-s390x-grype-debugsource"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-R-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-add-determinism-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-alternatives-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-annobin-docs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-annobin-plugin-gcc-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ansible-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-askalono-cli-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-audit-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bash-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-binutils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-build-reproducibility-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bzip2-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bzip2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ca-certificates-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cmake-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-coreutils-common-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-coreutils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cpio-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cpp-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-crypto-policies-config-default-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-crypto-policies-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-curl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cyrus-sasl-lib-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-debugedit-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-diffutils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-dwz-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ed-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-efi-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-debuginfod-client-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-libelf-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-erlang-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-expat-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-file-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-filesystem-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-filesystem-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-file-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-findutils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-fonts-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-forge-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-fpc-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gap-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gawk-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gcc-plugin-annobin-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gcc-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gdb-minimal-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gdbm-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ghc-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-common-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-gconv-extra-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-minimal-langpack-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gmp-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnat-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnome-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnulib-l10n-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-dirmngr-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-gpg-agent-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-gpgconf-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-keyboxd-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-verify-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnutls-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-filesystem-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-rpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-vendor-tools-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-bin-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-src-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golist-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gpgverify-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-grep-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gzip-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-gpg-keys-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-release-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-repos-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ima-evm-utils-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-info-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-jansson-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-java-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-json-c-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-kernel-headers-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-kernel-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-keyutils-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-krb5-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libacl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libarchive-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libassuan-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libatomic-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libattr-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libblkid-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libbrotli-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcap-ng-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcap-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcbor-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcom-err-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcurl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libeconf-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libevent-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfdisk-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libffi-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfido2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfsverity-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgcc-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgcrypt-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgomp-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgpg-error-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libidn2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libksba-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-liblastlog2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libmount-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libmpc-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnghttp2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnghttp3-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpfm-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpkgconf-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpsl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libselinux-utils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libselinux-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsemanage-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsepol-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsmartcols-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libssh-config-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libssh-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libstdc++-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtasn1-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtool-ltdl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libunistring-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libusb1-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libuuid-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libverto-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxcrypt-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxcrypt-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxml2-16-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libzstd-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-linkdupes-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lua-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lua-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lz4-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-make-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-meson-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-mpdecimal-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-mpfr-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ncurses-base-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ncurses-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-nettle-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ngtcp2-crypto-ossl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ngtcp2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-npth-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ocaml-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openblas-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openldap-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssl-fips-provider-upstream-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssl-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-p11-kit-trust-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-p11-kit-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-package-notes-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pam-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-patch-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-syntax-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-perl-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-m4-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-pkg-config-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-policycoreutils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-popt-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-publicsuffix-list-dafsa-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pyproject-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python-pip-wheel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-boolean.py-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-license-expression-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-qt5-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-qt6-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-readline-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-redhat-rpm-config-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-build-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-build-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-plugin-selinux-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-sequoia-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-sign-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rust-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sed-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-selinux-policy-targeted-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-selinux-policy-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-setup-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-shadow-utils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sqlite-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-standalone-sysusers-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tar-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tpm2-tss-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tree-sitter-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tzdata-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-unzip-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-util-linux-core-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-util-linux-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-which-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xxhash-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xz-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xz-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zig-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zip-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zlib-ng-compat-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zstd-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-x86-64-grype"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-x86-64-grype-debuginfo"}, {"spdxElementId": "SPDXRef-Buildroot-grype-x86-64", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-x86-64-grype-debugsource"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-git-go-git-v5-00bd7dd562277aa8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-fgprof-028e09b8e0af7d54", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-aws-sdk-go-base-v2-02f264c917327347", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-log-03ca7716a96b200c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-s3shared-046c89906dbfd047", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-stereoscope-047f2a8dfdff2ec7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sergi-go-diff-04a93a4c283a84cd", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-04fe982ec999f4b3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-santhosh-tekuri-jsonschema-v6-054e3201801960d3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-connections-055f9b571a87230d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-06665ac51a8b05dd", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-x-ansi-06eb651a60e3051a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-dsnet-compress-0884d09d5a4edf94", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aquasecurity-go-pep440-version-09af48a2a94fe3b0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-09e1c9f57c642aac", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-0a62a330e8dca275", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-piprate-json-gold-0ab6417fc6c1da43", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-0e5064cb931fd63f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-0e607a1eef712686", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-10721c341c1437b4", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pquerna-cachecontrol-11ddf1175af17aeb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-version-12031ebb9732130e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-gorm.io-gorm-13e7b307c936fad1", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-xi2-xz-149db6cbc0a31f38", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-macholibre-16b9a8c04d626683", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pborman-indent-1803aa6a67a1d654", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-18825e3bdfe6fb30", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-errors-18a61aca72f7aa70", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-18d21eac669ad38e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-nwaples-rardecode-v2-190d56abfd3f9fa6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-192c756afc1b4b18", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-19d5c5ad165767ed", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-cpuid-v2-1a404ab4af24d874", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-api-1ba18d0b64952633", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-1c113dae8ece9c91", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-adrg-xdg-1ccf1d268da23328", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-1d616cbd4098c9e1", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tailscale-hujson-1d6bc854352afb54", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-muesli-termenv-1da55026bcea0658", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-package-url-packageurl-go-1e113789d5f746f8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-detectors-gcp-20deb57b069386e0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-knqyf263-go-deb-version-21754c8a5c6695ed", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-deitch-magic-228ae80542cdc5f9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-subosito-gotenv-22a3ef71e0f2fce2", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gabriel-vasile-mimetype-23afdc05ecdaf6ce", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-go-homedir-2474bc99e24853ae", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fatih-color-2492abda9d250bfb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbatts-go-mtree-255f9224834e9845", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-wagoodman-go-partybus-25c44b4c1a48a849", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-tablewriter-265b1d2bef7add1f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aymanbagabas-go-osc52-v2-27ada4d00fd6df8a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-zyedidia-generic-27edf3f4d6373a5c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-units-28f91c6dac3edfa8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-signal-29d004e54b616eba", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-2a07c65db8ddadbd", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-scylladb-go-set-2a1d051ac7d872ea", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-aws-protocol-eventstream-2a4ccbeaebd5f05f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mgutz-ansi-2d49a3534cc873e4", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-getter-2d9729d09912b8db", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-envoyproxy-protoc-gen-validate-2eaa9d37870fb68e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-smithy-go-2ed84f444da91b09", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-configsources-2fec998578d16401", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-agext-levenshtein-307135a3e71ad5b0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cloudflare-circl-307ef82247abfddd", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-321c77a3ed68dd6a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-321e711a91bcd311", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-3243e6b3d0196262", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-DataDog-zstd-32ffa33e85d92c4f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-3328cc3e8532f19b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Intevation-gval-338712d568fe840f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v2-33bf11a78ed18f1e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-userns-34668564d691afa0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-platforms-36620f1297a5756f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-lzo-36f868801dba853e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-compress-372ef7a0e2b2a35d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-minio-minlz-37f7a8c87d069f0d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sso-3864ee0e3b3544e5", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-dustin-go-humanize-38b92c12db034b8b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-api-39436ee72a11f657", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-3b8a59018f129276", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-3bc09960970c6e93", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aquasecurity-go-version-3cdb3739620c8830", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-config-3da23dfe76cb8bd5", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-iam-3dcb6e83bf2bf461", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cel.dev-expr-3e4308df99fec5e0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-3f75ea4ff7330f60", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-licensecheck-40bd7e54da5c97f5", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jinzhu-inflection-40d8668794465355", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-huandu-xstrings-4195f6421c055c9c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-436c449d4d721777", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-exp-438fece4cf9d6e66", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gogo-protobuf-43d3197d43adc278", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-43f8326a3f7ec57d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-462b688f9e9de469", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-lipgloss-4726668aa47bebe7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mikelolasagasti-xz-48d77da2c8723037", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-profile-4907db64fbf51e41", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sourcegraph-conc-496288b2a3922a0e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-sync-49adc6b78341bf5d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-4a0c44df6f2477ba", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-struct-converter-4a596a0845ab2f7d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-4aaf1fe1177cc2ff", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-golang-lru-v2-4cb75c535d1d44de", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-4ce313b798152e8e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-user-4cf490914ba7e9fe", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-pprof-4d213057d3a734c4", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v4-4e5a49aa8e64ceff", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-shopspring-decimal-4f889045f1c1e25c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-rpmdb-50d329c022b6f15c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gookit-color-5159a7261a7e3a1c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-5188df0b81ec434f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spiffe-go-spiffe-v2-54c3d99596800a45", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-55829954aac37940", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-andybalholm-brotli-56e1f06baaf4a218", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-572375f039717827", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spdx-tools-golang-5755da0efd945ef0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-owenrumney-go-sarif-59763986900284d7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hako-durafmt-59baa2ff19378990", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-5b624c1c4679d04d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sylabs-squashfs-5cb3f0cb890222e7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-time-5cd6fcf1b237cb60", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-github-go-spdx-v2-5d56e43d8bf3fe2e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jinzhu-now-5efff40d79682eed", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pandatix-go-cvss-60706d75d1a6abcf", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-glebarez-go-sqlite-60af756bb33feef5", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-harmonica-60f2d275a7e1ae57", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-elliotchance-phpserialize-62e5cd39b465fae7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-facebookincubator-nvdtools-64bcae274046b36c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gohugoio-hashstructure-65e07b14c8465767", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bgentry-go-netrc-6651f24cc432465d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Intevation-jsonpath-66cfbece15db56f6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sorairolake-lzip-go-6790a1fc7c4a7626", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-json-iterator-go-695ca007779138d7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-6986836f8412745c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bitnami-go-version-69c1eb5b8d6ad97d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-term-6a5672ca65714127", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-displaywidth-6abfcad0fde5aa31", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-dario.cat-mergo-6af779c40bb0cda2", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-6b15df27ccb3e109", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-6cbc51465f265d14", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-packageurl-go-6d3f54f8ac98a714", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-6da57c7e7286c9a0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-exporter-metric-6dab49020ed43907", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-colorprofile-6dba3626f0b69a9f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kastenhq-goversion-7046ac81c76e966a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-openvex-go-vex-7495f19291887976", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-bubbly-74da2cff68725218", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-stdlib-765c93b72a178fff", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-syft-76b24254d1aa5a2d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-golang-groupcache-77cb1f6eb14578e1", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-araddon-dateparse-7a997f87ffe1d6e8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-7acb51ac59af95ed", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-7b7b0ab24f8b3f77", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-viper-7bf4d289532b959a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-errors-7cda1f3cdf5d7b87", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-7e0783c42e488939", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-muesli-cancelreader-7e430e9f07d05ff6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gocsaf-csaf-v3-7fdea347cf8476cc", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-8230f2b4bba735f4", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-mod-8403c0075d718fe1", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-therootcompany-xz-84fd5126d4a36dd7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-85c9684e4383179f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-x-term-866f666c9b43203b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-skeema-knownhosts-872f3c4ed56c5329", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.etcd.io-bbolt-8847a227a1874d09", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kevinburke-ssh-config-88a5f5810b8016c4", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-logger-88b3da7b309b5b48", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-wagoodman-go-presenter-88d7354ec64b3a8a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-8a26d27741341332", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-8be373cb26850ea9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-accept-encoding-8c7275fc39c8eca8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-8ea585f2a9cf5309", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jbenet-go-context-8f46b7b00852dc48", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-8fa6bf13a44774e0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-ssooidc-8fcbed41b4e86b2e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-git-gcfg-90d49e96e6d7811b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-endpoints-v2-913782d214eca239", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-9235ab855bdeb8bb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-clio-925bf3919208e9fe", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-929ad634e5b8eb4d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-rust-secure-code-go-rustaudit-9319d3660bdba7a0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-internal-resourcemapping-93bccc4f33a9ccc4", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-943e58a34acbf53d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-sqlite-949c9d905f550466", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-957998c4d9458337", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bodgit-sevenzip-963994f412d10d5d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-96ff370709f5c488", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-checksum-98bdd6fb95ce5715", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-locker-9ac1e298926f8680", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-9b2b3c8e51067d84", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-9b45f63a37baa16b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-client-9c15b03c4f5ee980", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-collections-9c6e7d53836407c4", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-9e6de060436fb613", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbles-9f3f2da93680d3e5", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-a25cd6b7e22ffaac", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bodgit-plumbing-a43eafe89820277e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-signin-a5004611340725d2", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-xanzy-ssh-agent-a5f1728d49d8948f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-s2a-go-a5f1cc97c46b15bd", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-a6092a4d1d89dc2d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-a88141cd504072b7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-libc-a8b40b70bf32ff0a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-aa546e9b20bbfa2f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-aabcae1a264b7ae0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go4.org-addb87b09a71c98b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-cat-affc6299f590a1c6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-monitoring-b14d361b86b848f6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-ll-b18725548579a1af", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-b28f1de83b33f1b6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-masahiro331-go-mvn-version-b32abaa54faaf390", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-memory-b46da2eb81199211", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-fangs-b5da60bd15bb6752", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-b62280c82ba92a85", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-rivo-uniseg-b7ced83ecd1f6a36", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-tools-b8c9f82a47bddc38", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-b946022d64c2708f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-bab0905ec25511cc", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-afero-bac3cd9eb4be88ce", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-knqyf263-go-apk-version-baf86a0eef263756", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-glebarez-sqlite-bcc08be7aba0c066", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-bd5711e95002750c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-remyoudompheng-bigfft-bd7c0d5b6382c930", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-diskfs-go-diskfs-bdd589b4d25b6836", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-be4f63fa5b247ada", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-c25f781c3766bea2", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-distribution-reference-c26b35f64eba50f6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cncf-xds-go-c2fc66bf85548ac9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-mathutil-c4fff7a380580297", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-smallnest-ringbuffer-c5f4530daf013bd0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-continuity-c83c10c2bdff37df", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-goccy-go-yaml-c8ed6713338e81a8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vifraa-gopom-c9e526c37cbb3d94", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sts-ca7ccfb508523df2", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cast-ccf384dba9c98cd8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-cd705e47cc406c6c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-becheran-wildmatch-go-cf2029ab5cbb0ab9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-cfe722c8599fd009", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mholt-archives-d0ae32ed0e95faa7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-cmp-d1430265f4af244d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-d1aad4f773abec11", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-oauth2-d2707f1fb017a62b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jinzhu-copier-d31f145c768c18f9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-d5a37776637d1cd6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-fifo-d5fb743b8837f525", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-d8a09e3e30c91df5", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-wagoodman-go-progress-d9a2660825cba504", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-git-go-billy-v5-d9ba19a21e74cc4f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-da0e7a7f5462a9a8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-STARRY-S-zip-da3bad7ec194de56", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bodgit-windows-dadf666f11ba094d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-dd0ee30b47f1c434", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-dd1eefc7392cbef3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-ddaf22c115a7ccc4", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-feature-ec2-imds-ddd0e9558f46bcea", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-muesli-ansi-dddfc1daec8c3b8f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-x-cellbuf-e0e75207b1ae813c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-restruct-restruct-e0ed6d7b9e4189fa", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-cli-e0f555e52fb18165", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gpustack-gguf-parser-go-e1aa1e11326cb528", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-xerrors-e2149f3fcd2c04ca", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-e2694b7a76018f2e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-storage-e27a83144e679373", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-nix-community-go-nix-e3745634f19e1967", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-OneOfOne-xxhash-e4b71e69c275c934", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-v4a-e4c81f476b7e03eb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-plugin-e55613b471264836", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-e587b86c098543c6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pjbgf-sha1cd-e638712137282e0e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-lucasb-eyer-go-colorful-e652e081e258804c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-e75bf186727c8621", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-blakesmith-ar-e9bab9e9cd0248f4", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-henvic-httpretty-ea8fcbe93232214c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sassoftware-go-rpmutils-eaed9182c259c641", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-s3-ef02173b215a29a3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-effd8a5e55f4bcf8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-f017488955108537", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-saintfish-chardet-f03fc3b6bf59513d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-CycloneDX-cyclonedx-go-f12395ade08bb16e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-f2189310a6c49850", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-xattr-f23c6b9a97fba1db", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-in-toto-attestation-f23e1a4e9bf52620", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-warnings.v0-f2df787e7063216b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-f2e8a623d2aae506", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-presigned-url-f387836146e8cd80", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-iancoleman-strcase-f399af78f755b2e4", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-homedir-f4ae60a7c1bf5082", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spdx-gordf-f5233f5247411735", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-howett.net-plist-f5d814ef8dae0279", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-f7711b9cf0a68927", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-detectors-gcp-f78bd2ed2f59d4a7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-emirpasic-gods-f7fde325079a7eae", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-acobaugh-osrelease-f83fb2c7c3cc811a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-xo-terminfo-f85b11397208b620", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbletea-f9f508f49bfb91d7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-envoyproxy-go-control-plane-envoy-f9f69d4bf43aa209", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-credentials-fe144c2a9ba9219e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-fe50cc660f2474c4", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-git-go-git-v5-00bd7dd562277aa8", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-fgprof-028e09b8e0af7d54", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-aws-sdk-go-base-v2-02f264c917327347", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-log-03ca7716a96b200c", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-s3shared-046c89906dbfd047", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-stereoscope-047f2a8dfdff2ec7", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sergi-go-diff-04a93a4c283a84cd", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-04fe982ec999f4b3", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-santhosh-tekuri-jsonschema-v6-054e3201801960d3", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-connections-055f9b571a87230d", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-06665ac51a8b05dd", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-x-ansi-06eb651a60e3051a", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-dsnet-compress-0884d09d5a4edf94", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aquasecurity-go-pep440-version-09af48a2a94fe3b0", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-09e1c9f57c642aac", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-0a62a330e8dca275", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-piprate-json-gold-0ab6417fc6c1da43", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-0e5064cb931fd63f", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-0e607a1eef712686", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-10721c341c1437b4", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pquerna-cachecontrol-11ddf1175af17aeb", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-version-12031ebb9732130e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-gorm.io-gorm-13e7b307c936fad1", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-xi2-xz-149db6cbc0a31f38", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-macholibre-16b9a8c04d626683", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pborman-indent-1803aa6a67a1d654", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-18825e3bdfe6fb30", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-errors-18a61aca72f7aa70", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-18d21eac669ad38e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-nwaples-rardecode-v2-190d56abfd3f9fa6", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-192c756afc1b4b18", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-19d5c5ad165767ed", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-cpuid-v2-1a404ab4af24d874", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-api-1ba18d0b64952633", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-1c113dae8ece9c91", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-adrg-xdg-1ccf1d268da23328", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-1d616cbd4098c9e1", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tailscale-hujson-1d6bc854352afb54", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-muesli-termenv-1da55026bcea0658", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-package-url-packageurl-go-1e113789d5f746f8", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-detectors-gcp-20deb57b069386e0", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-knqyf263-go-deb-version-21754c8a5c6695ed", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-deitch-magic-228ae80542cdc5f9", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-subosito-gotenv-22a3ef71e0f2fce2", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gabriel-vasile-mimetype-23afdc05ecdaf6ce", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-go-homedir-2474bc99e24853ae", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fatih-color-2492abda9d250bfb", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbatts-go-mtree-255f9224834e9845", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-wagoodman-go-partybus-25c44b4c1a48a849", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-tablewriter-265b1d2bef7add1f", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aymanbagabas-go-osc52-v2-27ada4d00fd6df8a", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-zyedidia-generic-27edf3f4d6373a5c", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-units-28f91c6dac3edfa8", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-signal-29d004e54b616eba", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-2a07c65db8ddadbd", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-scylladb-go-set-2a1d051ac7d872ea", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-aws-protocol-eventstream-2a4ccbeaebd5f05f", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mgutz-ansi-2d49a3534cc873e4", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-getter-2d9729d09912b8db", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-envoyproxy-protoc-gen-validate-2eaa9d37870fb68e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-smithy-go-2ed84f444da91b09", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-configsources-2fec998578d16401", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-agext-levenshtein-307135a3e71ad5b0", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cloudflare-circl-307ef82247abfddd", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-321c77a3ed68dd6a", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-321e711a91bcd311", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-3243e6b3d0196262", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-DataDog-zstd-32ffa33e85d92c4f", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-3328cc3e8532f19b", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Intevation-gval-338712d568fe840f", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v2-33bf11a78ed18f1e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-userns-34668564d691afa0", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-platforms-36620f1297a5756f", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-lzo-36f868801dba853e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-compress-372ef7a0e2b2a35d", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-rpm-grype-37e92664271a3d41", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-minio-minlz-37f7a8c87d069f0d", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sso-3864ee0e3b3544e5", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-dustin-go-humanize-38b92c12db034b8b", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-api-39436ee72a11f657", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-3b8a59018f129276", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-3bc09960970c6e93", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aquasecurity-go-version-3cdb3739620c8830", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-config-3da23dfe76cb8bd5", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-iam-3dcb6e83bf2bf461", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cel.dev-expr-3e4308df99fec5e0", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-3f75ea4ff7330f60", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-licensecheck-40bd7e54da5c97f5", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jinzhu-inflection-40d8668794465355", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-huandu-xstrings-4195f6421c055c9c", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-436c449d4d721777", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-exp-438fece4cf9d6e66", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gogo-protobuf-43d3197d43adc278", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-43f8326a3f7ec57d", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-462b688f9e9de469", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-lipgloss-4726668aa47bebe7", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mikelolasagasti-xz-48d77da2c8723037", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-profile-4907db64fbf51e41", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sourcegraph-conc-496288b2a3922a0e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-sync-49adc6b78341bf5d", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-4a0c44df6f2477ba", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-struct-converter-4a596a0845ab2f7d", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-4aaf1fe1177cc2ff", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-golang-lru-v2-4cb75c535d1d44de", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-4ce313b798152e8e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-user-4cf490914ba7e9fe", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-pprof-4d213057d3a734c4", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v4-4e5a49aa8e64ceff", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-shopspring-decimal-4f889045f1c1e25c", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-rpmdb-50d329c022b6f15c", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gookit-color-5159a7261a7e3a1c", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-5188df0b81ec434f", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spiffe-go-spiffe-v2-54c3d99596800a45", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-55829954aac37940", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-andybalholm-brotli-56e1f06baaf4a218", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-572375f039717827", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spdx-tools-golang-5755da0efd945ef0", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-owenrumney-go-sarif-59763986900284d7", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hako-durafmt-59baa2ff19378990", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-5b624c1c4679d04d", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sylabs-squashfs-5cb3f0cb890222e7", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-time-5cd6fcf1b237cb60", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-github-go-spdx-v2-5d56e43d8bf3fe2e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jinzhu-now-5efff40d79682eed", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pandatix-go-cvss-60706d75d1a6abcf", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-glebarez-go-sqlite-60af756bb33feef5", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-harmonica-60f2d275a7e1ae57", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-elliotchance-phpserialize-62e5cd39b465fae7", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-facebookincubator-nvdtools-64bcae274046b36c", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gohugoio-hashstructure-65e07b14c8465767", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bgentry-go-netrc-6651f24cc432465d", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Intevation-jsonpath-66cfbece15db56f6", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sorairolake-lzip-go-6790a1fc7c4a7626", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-json-iterator-go-695ca007779138d7", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-6986836f8412745c", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bitnami-go-version-69c1eb5b8d6ad97d", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-term-6a5672ca65714127", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-displaywidth-6abfcad0fde5aa31", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-dario.cat-mergo-6af779c40bb0cda2", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-6b15df27ccb3e109", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-6cbc51465f265d14", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-packageurl-go-6d3f54f8ac98a714", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-6da57c7e7286c9a0", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-exporter-metric-6dab49020ed43907", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-colorprofile-6dba3626f0b69a9f", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kastenhq-goversion-7046ac81c76e966a", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-openvex-go-vex-7495f19291887976", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-bubbly-74da2cff68725218", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-stdlib-765c93b72a178fff", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-syft-76b24254d1aa5a2d", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-golang-groupcache-77cb1f6eb14578e1", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-araddon-dateparse-7a997f87ffe1d6e8", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-7acb51ac59af95ed", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-7b7b0ab24f8b3f77", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-viper-7bf4d289532b959a", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-errors-7cda1f3cdf5d7b87", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-7e0783c42e488939", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-muesli-cancelreader-7e430e9f07d05ff6", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gocsaf-csaf-v3-7fdea347cf8476cc", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-8230f2b4bba735f4", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-mod-8403c0075d718fe1", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-therootcompany-xz-84fd5126d4a36dd7", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-85c9684e4383179f", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-x-term-866f666c9b43203b", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-skeema-knownhosts-872f3c4ed56c5329", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.etcd.io-bbolt-8847a227a1874d09", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kevinburke-ssh-config-88a5f5810b8016c4", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-logger-88b3da7b309b5b48", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-wagoodman-go-presenter-88d7354ec64b3a8a", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-8a26d27741341332", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-8be373cb26850ea9", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-accept-encoding-8c7275fc39c8eca8", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-8ea585f2a9cf5309", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jbenet-go-context-8f46b7b00852dc48", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-8fa6bf13a44774e0", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-ssooidc-8fcbed41b4e86b2e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-git-gcfg-90d49e96e6d7811b", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-endpoints-v2-913782d214eca239", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-9235ab855bdeb8bb", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-clio-925bf3919208e9fe", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-929ad634e5b8eb4d", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-rust-secure-code-go-rustaudit-9319d3660bdba7a0", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-internal-resourcemapping-93bccc4f33a9ccc4", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-943e58a34acbf53d", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-sqlite-949c9d905f550466", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-957998c4d9458337", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bodgit-sevenzip-963994f412d10d5d", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-96ff370709f5c488", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-checksum-98bdd6fb95ce5715", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-locker-9ac1e298926f8680", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-9b2b3c8e51067d84", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-9b45f63a37baa16b", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-client-9c15b03c4f5ee980", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-collections-9c6e7d53836407c4", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-9e6de060436fb613", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbles-9f3f2da93680d3e5", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-a25cd6b7e22ffaac", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bodgit-plumbing-a43eafe89820277e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-signin-a5004611340725d2", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-xanzy-ssh-agent-a5f1728d49d8948f", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-s2a-go-a5f1cc97c46b15bd", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-a6092a4d1d89dc2d", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-a88141cd504072b7", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-libc-a8b40b70bf32ff0a", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-aa546e9b20bbfa2f", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-aabcae1a264b7ae0", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go4.org-addb87b09a71c98b", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-cat-affc6299f590a1c6", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-monitoring-b14d361b86b848f6", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-ll-b18725548579a1af", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-b28f1de83b33f1b6", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-masahiro331-go-mvn-version-b32abaa54faaf390", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-memory-b46da2eb81199211", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-fangs-b5da60bd15bb6752", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-b62280c82ba92a85", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-rivo-uniseg-b7ced83ecd1f6a36", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-tools-b8c9f82a47bddc38", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-b946022d64c2708f", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-bab0905ec25511cc", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-afero-bac3cd9eb4be88ce", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-knqyf263-go-apk-version-baf86a0eef263756", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-glebarez-sqlite-bcc08be7aba0c066", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-bd5711e95002750c", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-remyoudompheng-bigfft-bd7c0d5b6382c930", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-diskfs-go-diskfs-bdd589b4d25b6836", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-be4f63fa5b247ada", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-c25f781c3766bea2", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-distribution-reference-c26b35f64eba50f6", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cncf-xds-go-c2fc66bf85548ac9", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-mathutil-c4fff7a380580297", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-smallnest-ringbuffer-c5f4530daf013bd0", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-continuity-c83c10c2bdff37df", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-goccy-go-yaml-c8ed6713338e81a8", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vifraa-gopom-c9e526c37cbb3d94", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sts-ca7ccfb508523df2", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cast-ccf384dba9c98cd8", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-cd705e47cc406c6c", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-becheran-wildmatch-go-cf2029ab5cbb0ab9", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-cfe722c8599fd009", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mholt-archives-d0ae32ed0e95faa7", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-cmp-d1430265f4af244d", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-d1aad4f773abec11", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-oauth2-d2707f1fb017a62b", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jinzhu-copier-d31f145c768c18f9", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-d5a37776637d1cd6", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-fifo-d5fb743b8837f525", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-d8a09e3e30c91df5", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-wagoodman-go-progress-d9a2660825cba504", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-git-go-billy-v5-d9ba19a21e74cc4f", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-da0e7a7f5462a9a8", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-STARRY-S-zip-da3bad7ec194de56", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bodgit-windows-dadf666f11ba094d", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-dd0ee30b47f1c434", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-dd1eefc7392cbef3", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-ddaf22c115a7ccc4", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-feature-ec2-imds-ddd0e9558f46bcea", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-muesli-ansi-dddfc1daec8c3b8f", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-x-cellbuf-e0e75207b1ae813c", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-restruct-restruct-e0ed6d7b9e4189fa", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-cli-e0f555e52fb18165", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gpustack-gguf-parser-go-e1aa1e11326cb528", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-xerrors-e2149f3fcd2c04ca", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-e2694b7a76018f2e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-storage-e27a83144e679373", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-nix-community-go-nix-e3745634f19e1967", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-OneOfOne-xxhash-e4b71e69c275c934", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-v4a-e4c81f476b7e03eb", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-plugin-e55613b471264836", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-e587b86c098543c6", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pjbgf-sha1cd-e638712137282e0e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-lucasb-eyer-go-colorful-e652e081e258804c", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-e75bf186727c8621", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-blakesmith-ar-e9bab9e9cd0248f4", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-henvic-httpretty-ea8fcbe93232214c", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sassoftware-go-rpmutils-eaed9182c259c641", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-s3-ef02173b215a29a3", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-effd8a5e55f4bcf8", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-f017488955108537", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-saintfish-chardet-f03fc3b6bf59513d", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-CycloneDX-cyclonedx-go-f12395ade08bb16e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-f2189310a6c49850", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-xattr-f23c6b9a97fba1db", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-in-toto-attestation-f23e1a4e9bf52620", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-warnings.v0-f2df787e7063216b", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-f2e8a623d2aae506", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-presigned-url-f387836146e8cd80", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-iancoleman-strcase-f399af78f755b2e4", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-homedir-f4ae60a7c1bf5082", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spdx-gordf-f5233f5247411735", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-howett.net-plist-f5d814ef8dae0279", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-f7711b9cf0a68927", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-detectors-gcp-f78bd2ed2f59d4a7", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-emirpasic-gods-f7fde325079a7eae", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-acobaugh-osrelease-f83fb2c7c3cc811a", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-xo-terminfo-f85b11397208b620", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbletea-f9f508f49bfb91d7", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-envoyproxy-go-control-plane-envoy-f9f69d4bf43aa209", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-credentials-fe144c2a9ba9219e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-fe50cc660f2474c4", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-cel.dev-expr-3e4308df99fec5e0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-321c77a3ed68dd6a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-auth-dd0ee30b47f1c434", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-55829954aac37940", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-2a07c65db8ddadbd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-iam-3dcb6e83bf2bf461", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-monitoring-b14d361b86b848f6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-storage-e27a83144e679373", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-dario.cat-mergo-6af779c40bb0cda2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-8be373cb26850ea9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-CycloneDX-cyclonedx-go-f12395ade08bb16e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-DataDog-zstd-32ffa33e85d92c4f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-detectors-gcp-20deb57b069386e0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-exporter-metric-6dab49020ed43907", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-internal-resourcemapping-93bccc4f33a9ccc4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Intevation-gval-338712d568fe840f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Intevation-jsonpath-66cfbece15db56f6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-5188df0b81ec434f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-3bc09960970c6e93", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-4ce313b798152e8e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-OneOfOne-xxhash-e4b71e69c275c934", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-19d5c5ad165767ed", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-STARRY-S-zip-da3bad7ec194de56", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-be4f63fa5b247ada", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-acobaugh-osrelease-f83fb2c7c3cc811a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-adrg-xdg-1ccf1d268da23328", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-agext-levenshtein-307135a3e71ad5b0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-bubbly-74da2cff68725218", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-clio-925bf3919208e9fe", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-fangs-b5da60bd15bb6752", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-collections-9c6e7d53836407c4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-homedir-f4ae60a7c1bf5082", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-logger-88b3da7b309b5b48", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-lzo-36f868801dba853e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-macholibre-16b9a8c04d626683", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-rpmdb-50d329c022b6f15c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-struct-converter-4a596a0845ab2f7d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-sync-49adc6b78341bf5d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-version-12031ebb9732130e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-2f86d8e2b2d5c53b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-packageurl-go-6d3f54f8ac98a714", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-stereoscope-047f2a8dfdff2ec7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-76b24254d1aa5a2d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-andybalholm-brotli-56e1f06baaf4a218", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-1c113dae8ece9c91", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aquasecurity-go-pep440-version-09af48a2a94fe3b0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aquasecurity-go-version-3cdb3739620c8830", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-araddon-dateparse-7a997f87ffe1d6e8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-b946022d64c2708f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-aws-protocol-eventstream-2a4ccbeaebd5f05f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-config-3da23dfe76cb8bd5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-credentials-fe144c2a9ba9219e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-feature-ec2-imds-ddd0e9558f46bcea", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-configsources-2fec998578d16401", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-endpoints-v2-913782d214eca239", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-v4a-e4c81f476b7e03eb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-accept-encoding-8c7275fc39c8eca8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-checksum-98bdd6fb95ce5715", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-presigned-url-f387836146e8cd80", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-s3shared-046c89906dbfd047", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-s3-ef02173b215a29a3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-signin-a5004611340725d2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sso-3864ee0e3b3544e5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-ssooidc-8fcbed41b4e86b2e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sts-ca7ccfb508523df2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-smithy-go-2ed84f444da91b09", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aymanbagabas-go-osc52-v2-27ada4d00fd6df8a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-becheran-wildmatch-go-cf2029ab5cbb0ab9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bgentry-go-netrc-6651f24cc432465d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bitnami-go-version-69c1eb5b8d6ad97d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-blakesmith-ar-e9bab9e9cd0248f4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v2-33bf11a78ed18f1e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v4-4e5a49aa8e64ceff", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bodgit-plumbing-a43eafe89820277e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bodgit-sevenzip-963994f412d10d5d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bodgit-windows-dadf666f11ba094d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-a25cd6b7e22ffaac", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbles-9f3f2da93680d3e5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbletea-f9f508f49bfb91d7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-colorprofile-6dba3626f0b69a9f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-harmonica-60f2d275a7e1ae57", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-lipgloss-4726668aa47bebe7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-x-ansi-06eb651a60e3051a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-x-cellbuf-e0e75207b1ae813c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-x-term-866f666c9b43203b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-clipperhouse-displaywidth-6abfcad0fde5aa31", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-0e607a1eef712686", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cloudflare-circl-307ef82247abfddd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cncf-xds-go-c2fc66bf85548ac9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-8230f2b4bba735f4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-3243e6b3d0196262", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-continuity-c83c10c2bdff37df", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-errdefs-bab0905ec25511cc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-ddaf22c115a7ccc4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-fifo-d5fb743b8837f525", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-log-03ca7716a96b200c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-platforms-36620f1297a5756f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-plugin-e55613b471264836", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-10721c341c1437b4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-85c9684e4383179f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-43f8326a3f7ec57d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-deitch-magic-228ae80542cdc5f9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-diskfs-go-diskfs-bdd589b4d25b6836", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-distribution-reference-c26b35f64eba50f6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-cli-e0f555e52fb18165", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-docker-effd8a5e55f4bcf8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-c25f781c3766bea2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-go-connections-055f9b571a87230d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-go-units-28f91c6dac3edfa8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dsnet-compress-0884d09d5a4edf94", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dustin-go-humanize-38b92c12db034b8b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-elliotchance-phpserialize-62e5cd39b465fae7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-emirpasic-gods-f7fde325079a7eae", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-envoyproxy-go-control-plane-envoy-f9f69d4bf43aa209", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-envoyproxy-protoc-gen-validate-2eaa9d37870fb68e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-facebookincubator-nvdtools-64bcae274046b36c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fatih-color-2492abda9d250bfb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-felixge-fgprof-028e09b8e0af7d54", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-aa546e9b20bbfa2f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-a6092a4d1d89dc2d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gabriel-vasile-mimetype-23afdc05ecdaf6ce", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-github-go-spdx-v2-5d56e43d8bf3fe2e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-glebarez-go-sqlite-60af756bb33feef5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-glebarez-sqlite-bcc08be7aba0c066", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-git-gcfg-90d49e96e6d7811b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-git-go-billy-v5-d9ba19a21e74cc4f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-git-go-git-v5-00bd7dd562277aa8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-436c449d4d721777", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-logr-572375f039717827", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-stdr-3b8a59018f129276", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-restruct-restruct-e0ed6d7b9e4189fa", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-a88141cd504072b7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-goccy-go-yaml-c8ed6713338e81a8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gocsaf-csaf-v3-7fdea347cf8476cc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gogo-protobuf-43d3197d43adc278", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gohugoio-hashstructure-65e07b14c8465767", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-golang-groupcache-77cb1f6eb14578e1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-cmp-d1430265f4af244d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-0e5064cb931fd63f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-licensecheck-40bd7e54da5c97f5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-pprof-4d213057d3a734c4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-s2a-go-a5f1cc97c46b15bd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-uuid-d1aad4f773abec11", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-7acb51ac59af95ed", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-4aaf1fe1177cc2ff", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gookit-color-5159a7261a7e3a1c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gpustack-gguf-parser-go-e1aa1e11326cb528", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hako-durafmt-59baa2ff19378990", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-aws-sdk-go-base-v2-02f264c917327347", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-cd705e47cc406c6c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-5b624c1c4679d04d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-getter-2d9729d09912b8db", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-4a0c44df6f2477ba", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-3328cc3e8532f19b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-golang-lru-v2-4cb75c535d1d44de", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-aabcae1a264b7ae0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-henvic-httpretty-ea8fcbe93232214c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-huandu-xstrings-4195f6421c055c9c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-iancoleman-strcase-f399af78f755b2e4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-in-toto-attestation-f23e1a4e9bf52620", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jbenet-go-context-8f46b7b00852dc48", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jinzhu-copier-d31f145c768c18f9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jinzhu-inflection-40d8668794465355", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jinzhu-now-5efff40d79682eed", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-json-iterator-go-695ca007779138d7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-kastenhq-goversion-7046ac81c76e966a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-kevinburke-ssh-config-88a5f5810b8016c4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-klauspost-compress-372ef7a0e2b2a35d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-klauspost-cpuid-v2-1a404ab4af24d874", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-0a62a330e8dca275", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-knqyf263-go-apk-version-baf86a0eef263756", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-knqyf263-go-deb-version-21754c8a5c6695ed", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-lucasb-eyer-go-colorful-e652e081e258804c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-masahiro331-go-mvn-version-b32abaa54faaf390", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-e2694b7a76018f2e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-d8a09e3e30c91df5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-7e0783c42e488939", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mgutz-ansi-2d49a3534cc873e4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mholt-archives-d0ae32ed0e95faa7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mikelolasagasti-xz-48d77da2c8723037", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-minio-minlz-37f7a8c87d069f0d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-6da57c7e7286c9a0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-go-homedir-2474bc99e24853ae", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-462b688f9e9de469", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-09e1c9f57c642aac", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-9b45f63a37baa16b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-locker-9ac1e298926f8680", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-moby-api-39436ee72a11f657", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-moby-client-9c15b03c4f5ee980", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-6b15df27ccb3e109", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-signal-29d004e54b616eba", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-user-4cf490914ba7e9fe", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-userns-34668564d691afa0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-321e711a91bcd311", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-e75bf186727c8621", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-muesli-ansi-dddfc1daec8c3b8f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-muesli-cancelreader-7e430e9f07d05ff6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-muesli-termenv-1da55026bcea0658", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-nix-community-go-nix-e3745634f19e1967", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-nwaples-rardecode-v2-190d56abfd3f9fa6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-olekukonko-cat-affc6299f590a1c6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-olekukonko-errors-18a61aca72f7aa70", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-olekukonko-ll-b18725548579a1af", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-olekukonko-tablewriter-265b1d2bef7add1f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-957998c4d9458337", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-1d616cbd4098c9e1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-8fa6bf13a44774e0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-openvex-go-vex-7495f19291887976", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-owenrumney-go-sarif-59763986900284d7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-package-url-packageurl-go-1e113789d5f746f8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pandatix-go-cvss-60706d75d1a6abcf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pborman-indent-1803aa6a67a1d654", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-943e58a34acbf53d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-6cbc51465f265d14", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-6986836f8412745c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-piprate-json-gold-0ab6417fc6c1da43", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pjbgf-sha1cd-e638712137282e0e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-errors-7cda1f3cdf5d7b87", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-profile-4907db64fbf51e41", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-xattr-f23c6b9a97fba1db", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pquerna-cachecontrol-11ddf1175af17aeb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-remyoudompheng-bigfft-bd7c0d5b6382c930", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-rivo-uniseg-b7ced83ecd1f6a36", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-rust-secure-code-go-rustaudit-9319d3660bdba7a0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-929ad634e5b8eb4d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-saintfish-chardet-f03fc3b6bf59513d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-santhosh-tekuri-jsonschema-v6-054e3201801960d3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sassoftware-go-rpmutils-eaed9182c259c641", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-scylladb-go-set-2a1d051ac7d872ea", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sergi-go-diff-04a93a4c283a84cd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-shopspring-decimal-4f889045f1c1e25c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-f017488955108537", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-skeema-knownhosts-872f3c4ed56c5329", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-smallnest-ringbuffer-c5f4530daf013bd0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sorairolake-lzip-go-6790a1fc7c4a7626", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sourcegraph-conc-496288b2a3922a0e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spdx-gordf-f5233f5247411735", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spdx-tools-golang-5755da0efd945ef0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-afero-bac3cd9eb4be88ce", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-cast-ccf384dba9c98cd8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-cobra-fe50cc660f2474c4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-pflag-9235ab855bdeb8bb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-viper-7bf4d289532b959a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spiffe-go-spiffe-v2-54c3d99596800a45", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-subosito-gotenv-22a3ef71e0f2fce2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-f2189310a6c49850", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sylabs-squashfs-5cb3f0cb890222e7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tailscale-hujson-1d6bc854352afb54", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-therootcompany-xz-84fd5126d4a36dd7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-04fe982ec999f4b3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vbatts-go-mtree-255f9224834e9845", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vifraa-gopom-c9e526c37cbb3d94", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-wagoodman-go-partybus-25c44b4c1a48a849", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-wagoodman-go-presenter-88d7354ec64b3a8a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-wagoodman-go-progress-d9a2660825cba504", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-xanzy-ssh-agent-a5f1728d49d8948f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-xi2-xz-149db6cbc0a31f38", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-xo-terminfo-f85b11397208b620", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-96ff370709f5c488", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-zyedidia-generic-27edf3f4d6373a5c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.etcd.io-bbolt-8847a227a1874d09", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-b62280c82ba92a85", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-detectors-gcp-f78bd2ed2f59d4a7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-f7711b9cf0a68927", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-8a26d27741341332", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-18d21eac669ad38e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-7b7b0ab24f8b3f77", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-3f75ea4ff7330f60", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-18825e3bdfe6fb30", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-9e6de060436fb613", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-cfe722c8599fd009", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go4.org-addb87b09a71c98b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-crypto-06665ac51a8b05dd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-exp-438fece4cf9d6e66", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-mod-8403c0075d718fe1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-net-e587b86c098543c6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-oauth2-d2707f1fb017a62b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sync-b28f1de83b33f1b6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sys-dd1eefc7392cbef3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-term-6a5672ca65714127", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-text-8ea585f2a9cf5309", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-time-5cd6fcf1b237cb60", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-tools-b8c9f82a47bddc38", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-xerrors-e2149f3fcd2c04ca", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-api-1ba18d0b64952633", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-9b2b3c8e51067d84", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-d5a37776637d1cd6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-da0e7a7f5462a9a8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-grpc-f2e8a623d2aae506", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-protobuf-192c756afc1b4b18", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-gopkg.in-warnings.v0-f2df787e7063216b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-bd5711e95002750c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-gorm.io-gorm-13e7b307c936fad1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-rpm-grype-37e92664271a3d41", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-howett.net-plist-f5d814ef8dae0279", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-modernc.org-libc-a8b40b70bf32ff0a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-modernc.org-mathutil-c4fff7a380580297", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-modernc.org-memory-b46da2eb81199211", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-modernc.org-sqlite-949c9d905f550466", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-stdlib-765c93b72a178fff", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-aarch64-grype", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.aarch64"}, {"spdxElementId": "SPDXRef-Package-binary-jdk-3cf5330955a84ab1", "relatedSpdxElement": "SPDXRef-File-...opt-java-openjdk-release-b32bc18bc276b117", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Package-dotnet-Microsoft.Extensions.Primitives-0e65bdf9a3c51500", "relatedSpdxElement": "SPDXRef-Package-dotnet-Microsoft.Extensions.Options-c567666f1d3eabf3", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-dotnet-Microsoft.Extensions.Logging-2c9972b4a182c6e4", "relatedSpdxElement": "SPDXRef-Package-dotnet-TestLibrary-b5f66243fe64203d", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-dotnet-Serilog.Sinks.Console-428ca9e2778d8a6f", "relatedSpdxElement": "SPDXRef-Package-dotnet-TestLibrary-b5f66243fe64203d", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-dotnet-Microsoft.Extensions.Logging.Abstractions-4e22cf2bcfe9455c", "relatedSpdxElement": "SPDXRef-Package-dotnet-Microsoft.Extensions.Logging-2c9972b4a182c6e4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-dotnet-Newtonsoft.Json-513f38c30b10f650", "relatedSpdxElement": "SPDXRef-Package-dotnet-TestLibrary-b5f66243fe64203d", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-dotnet-Microsoft.Extensions.DependencyInjection.Abstractions-7059ca95fdc96525", "relatedSpdxElement": "SPDXRef-Package-dotnet-Microsoft.Extensions.Logging-2c9972b4a182c6e4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-dotnet-Microsoft.Extensions.DependencyInjection.Abstractions-7059ca95fdc96525", "relatedSpdxElement": "SPDXRef-Package-dotnet-Microsoft.Extensions.Options-c567666f1d3eabf3", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-dotnet-Microsoft.Extensions.DependencyInjection.Abstractions-7059ca95fdc96525", "relatedSpdxElement": "SPDXRef-Package-dotnet-Microsoft.Extensions.DependencyInjection-f1997feaecac0ce6", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-dotnet-AWSSDK.Core-8e7a0987c8b015fd", "relatedSpdxElement": "SPDXRef-Package-dotnet-TestCommon-ae2cc3cff261601c", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-dotnet-TestCommon-ae2cc3cff261601c", "relatedSpdxElement": "SPDXRef-Package-dotnet-TestLibrary-b5f66243fe64203d", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-dotnet-Serilog-b7113daa72cb3644", "relatedSpdxElement": "SPDXRef-Package-dotnet-Serilog.Sinks.Console-428ca9e2778d8a6f", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-dotnet-Serilog-b7113daa72cb3644", "relatedSpdxElement": "SPDXRef-Package-dotnet-TestLibrary-b5f66243fe64203d", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-dotnet-Microsoft.Extensions.Options-c567666f1d3eabf3", "relatedSpdxElement": "SPDXRef-Package-dotnet-Microsoft.Extensions.Logging-2c9972b4a182c6e4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-java-archive-joda-time-eaa4d4b3bd89d483", "relatedSpdxElement": "SPDXRef-Package-java-archive-example-java-app-maven-a7a11a8dd6012208", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-dotnet-Microsoft.Extensions.DependencyInjection-f1997feaecac0ce6", "relatedSpdxElement": "SPDXRef-Package-dotnet-Microsoft.Extensions.Logging-2c9972b4a182c6e4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-dotnet-Microsoft.Extensions.DependencyInjection-f1997feaecac0ce6", "relatedSpdxElement": "SPDXRef-Package-dotnet-TestLibrary-b5f66243fe64203d", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sassoftware-go-rpmutils-0041fe15cccf8933", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-github-go-spdx-v2-004cc588d165df0b", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-0055873c0ce1a39b", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-005f8f7262d859c0", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-009b0ba8c25f5f40", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-upload-artifact-00a212884b440034", "relatedSpdxElement": "SPDXRef-File-....github-workflows-validations.yaml-ad929689d169a6c9", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-hackage-hasql-dynamic-statements-00ca9334cc8d0a40", "relatedSpdxElement": "SPDXRef-File-...haskell-stack.yaml.lock-ba4762468992c29c", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-01c44ce7f35117a8", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-scylladb-go-set-02080dbc1ccef012", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pandatix-go-cvss-036506eb5c70fd8b", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-elliotchance-phpserialize-0388e3fa7cbb825a", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-apk-ko-03a50c942696e292", "relatedSpdxElement": "SPDXRef-File-...lib-apk-db-installed-4ee5bd663f018994", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-invopop-jsonschema-03a72b1d075c72d8", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aymanbagabas-go-osc52-v2-03b6e9ac04130b97", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tidwall-gjson-04338fb47390afd1", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-cpuid-v2-043f7e40294aa8b6", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-github-go-spdx-v2-04627d3d9421aac7", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-04bc2386a5aa4c80", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-xerrors-056fc8b658138e7a", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-huandu-xstrings-0634db5052d02338", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-gem-bundler-06fbad6866ac85ac", "relatedSpdxElement": "SPDXRef-File-...ruby-specifications-bundler.gemspec-3dd72292b1f1be47", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-golang-lru-v2-0792687989b60a42", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gkampitakis-go-snaps-07da3958600bec9b", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbletea-0877d4ed51165bc6", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-envoyproxy-protoc-gen-validate-08b32ee1d7cb95d6", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-08b5338f302cc464", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-emirpasic-gods-091896950bf83083", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-setup-python-097c0506c599a1b5", "relatedSpdxElement": "SPDXRef-File-....github-actions-bootstrap-action.yaml-e931ab2019105f09", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-continuity-09913402da2bebd2", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-plugin-0a152c899dee64d6", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-workflow-anchore-workflows-.github-workflows-check-version-available.yaml-0a4c6c1fe2e4b66a", "relatedSpdxElement": "SPDXRef-File-....github-workflows-release.yaml-d103172c0041c1c4", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tidwall-gjson-0a8c0e60df52a781", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-detectors-gcp-0af171990b46e990", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-shlex-0b060ec91a1d2de4", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v2-0b15ec05af4a2804", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-0b90bc9a5a5b1807", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-workflow-anchore-workflows-.github-workflows-codeql.yaml-0bff96f8231700d7", "relatedSpdxElement": "SPDXRef-File-....github-workflows-codeql.yaml-45e4c3abdccec846", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-gem-rails-0bffe6003cf32471", "relatedSpdxElement": "SPDXRef-File-...ruby-Gemfile.lock-225207f840865b95", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sergi-go-diff-0c00c18d8ae68f91", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-hackage-lens-aeson-0c216abd2ca65e69", "relatedSpdxElement": "SPDXRef-File-...haskell-stack.yaml.lock-ba4762468992c29c", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-memory-0c296ab1a5739a3c", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-dsnet-compress-0c35e1bcc0278448", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-0c3d1d32aef4cc22", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cast-0c8e9ee8e493ef91", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-clio-0ca4696fdd0313fb", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gookit-color-0d2092096a50babd", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-0d3769a7c8360885", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-s3shared-0d56695f376e4179", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vifraa-gopom-0db3d570911de48c", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-dotnet-Microsoft.Extensions.Primitives-0e65bdf9a3c51500", "relatedSpdxElement": "SPDXRef-File-...dotnet-TestLibrary.deps.json-3106215bcb53f2d1", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-go-homedir-0eaeac14455768a2", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-user-0ec66a10cefc2803", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-api-0f1f223a702c8b97", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-pprof-0f80dceb464406c3", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sso-0f97466c0888a006", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-0faef477ce29ac7b", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-1049b3a34d385509", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-stretchr-objx-105c5fecde627a25", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-10613df95c6a2b3e", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-piprate-json-gold-10cef35a20554e69", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-fgprof-10e51b0cf504540d", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mholt-archives-11281137f401ad9f", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-11295fd5db771a70", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ncruces-go-strftime-1144b4da6fcfdc60", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-plugin-11c9a98ed3392369", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-knqyf263-go-apk-version-127a7942cb885de4", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-erikgeiser-coninput-1284b838dcd5a2b7", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-12ca537122616aed", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-x-cellbuf-12cf473406dae1e9", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-12df7c44943766c5", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-fangs-135612021b16f6db", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-test-deep-142d187d8cd402ca", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-stretchr-objx-1466a8a1e6db071b", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kr-text-149bb08a88b6158e", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-feature-ec2-imds-153a8c245aa59267", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-1548adc7fef097b5", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kastenhq-goversion-155aa2cd49359133", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-1569d256c4eba32a", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-15cfaf534d13d551", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-dustin-go-humanize-15e8a80a80b60385", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-signal-161aba58f6e8834e", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-connections-166704c30495edb9", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-smithy-go-16becfb2765ec82a", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-getter-16e827aec3c060b2", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-monitoring-170165bad3bf32a9", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-172719dd1e40f17f", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tidwall-match-173a47710c98e917", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-17921bc3f2f4444b", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Intevation-jsonpath-17b0206d8e174038", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-182b6051dc7fda66", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-186edabe71c9ad88", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-OneOfOne-xxhash-188589ff7ba0a040", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-hackage-RSA-192809b5e448215d", "relatedSpdxElement": "SPDXRef-File-...haskell-cabal.project.freeze-e33aa1a403ab8fd4", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-19989b5d142f3073", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-shopspring-decimal-19af8ea56a342c55", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spiffe-go-spiffe-v2-19c7011cfc5a1b62", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-1ac0c60afa1089df", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-.make-go.mod-f5109dc18f6da530", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opencensus.io-1b1445bd5d28512a", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bodgit-windows-1be77fc9d30ca125", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-errors-1c0b2d9b80d28584", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-1c231c21367d6661", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-docker-login-action-1c412d41e9b3d112", "relatedSpdxElement": "SPDXRef-File-....github-workflows-release.yaml-d103172c0041c1c4", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-owenrumney-go-sarif-1c9dfdacb0894035", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-tools-1d0c1f0fc356ce03", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-aws-protocol-eventstream-1d31bbfdcf4c518d", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-wagoodman-go-progress-1e0b68bacaba481c", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-1e9b8c91e22e88f0", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-1ecd2131fa62597f", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-python-codespell-1ffc391c48fb0ae8", "relatedSpdxElement": "SPDXRef-File-...otel-requirements.txt-b69fd806af1e91ad", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cel.dev-expr-20509c9d2dbe5cf0", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-208481c695126b4d", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-lzo-20f68955a698b8ba", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bgentry-go-netrc-21828244d7792b9a", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-deitch-magic-21fe7058dddd40ea", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-s3-235824f55444fe72", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-atomicwriter-23ea3fc711b67e87", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-andybalholm-brotli-244bcfc9c9eb6201", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-24f259b1002c0db3", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-macholibre-2574360ef88fad6d", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jinzhu-now-257bc1d78b7317c4", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-hackage-PyF-25c350a6b69e7297", "relatedSpdxElement": "SPDXRef-File-...haskell-cabal.project.freeze-e33aa1a403ab8fd4", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-sync-27bb9c28e5b6aa36", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v4-28316b09700feba5", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-configsources-28b18aa59cb5efe0", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v4-29e481ed8fc11a79", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-hackage-Spock-29efad8c122541e6", "relatedSpdxElement": "SPDXRef-File-...haskell-cabal.project.freeze-e33aa1a403ab8fd4", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-zizmorcore-zizmor-action-2a3b7b188c16f824", "relatedSpdxElement": "SPDXRef-File-...workflows-validate-github-actions.yaml-e17b422c5008a06c", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sorairolake-lzip-go-2a3dfa41f8cc9375", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-endpoints-v2-2a89bbfede5b08b7", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-glebarez-go-sqlite-2abff422cfbd2e31", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sylabs-squashfs-2acb894b326cc89c", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-subosito-gotenv-2ad2d37143330616", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mholt-archives-2b5d4e7f53cfa1d0", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-client-2baa2d7707160775", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-becheran-wildmatch-go-2bb58d89fe5dbfbc", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-locker-2be6f96afd760c9f", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-rivo-uniseg-2c0de3c260aa0d91", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-dotnet-Microsoft.Extensions.Logging-2c9972b4a182c6e4", "relatedSpdxElement": "SPDXRef-File-...dotnet-TestLibrary.deps.json-3106215bcb53f2d1", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-2cb9597aaebee04b", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-subosito-gotenv-2db166198c302bc1", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-platforms-2dec2875b7093ea8", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-units-2e1611e917f93a59", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-zyedidia-generic-2e1d3ced20587b7f", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-errors-2f2b4a7ce7872628", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-305848e01f1fb7d4", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-hackage-HUnit-31160b35319dd704", "relatedSpdxElement": "SPDXRef-File-...haskell-cabal.project.freeze-e33aa1a403ab8fd4", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gocsaf-csaf-v3-31257fde00fe839d", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-checksum-321e893ca7a203e7", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-userns-322f946a739c44e9", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gabriel-vasile-mimetype-32583b205e9b1eb8", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-3263f4ee7d0bc62c", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-32e021a358ae7940", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cloudflare-circl-3321c9be70fde1d7", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spdx-tools-golang-33492ce84f5deee3", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-colorprofile-336b7ead245bcb11", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-piprate-json-gold-33a0c1b072b89937", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-33ac523ce1a65b88", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tailscale-hujson-33cf017cdc0d6243", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gohugoio-hashstructure-3421f160f14a663e", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-deitch-magic-342f28875f321f14", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gpustack-gguf-parser-go-3438527434a12ca9", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-tablewriter-347c44c904ba4a4c", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-umisama-go-cpe-34cb07b51035c992", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-localereader-352c97afb005b940", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tidwall-sjson-35598b98347a05f7", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-35f7f9ed1665e42b", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-config-37158a30ef86835b", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-sqlite-372f331b53d7b47f", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pb33f-ordered-map-v2-373484fc5c20815e", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-openvex-go-vex-376bf4281f4f03cf", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-packageurl-go-376fa79c3055fefd", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-3840e907ad45a616", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-hackage-Diff-38843e84cb58524e", "relatedSpdxElement": "SPDXRef-File-...haskell-cabal.project.freeze-e33aa1a403ab8fd4", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-nwaples-rardecode-v2-38844de138a359c6", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-make-38f7c1ef68e05752", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-.make-go.mod-f5109dc18f6da530", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-feature-ec2-imds-3a0151868a8d31fe", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-cgroups-v3-3a2f25a12ed65cd5", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-v4a-3ad8a28e5cba1573", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-3b44c4726d0f371d", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-deb-apt-3ba8292752e73177", "relatedSpdxElement": "SPDXRef-File-...var-lib-dpkg-status-1d0b9e626ff2dfe2", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-glebarez-sqlite-3bd05babb7faa2f7", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-git-go-billy-v5-3bf9f6156c0fbf1c", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-3c26647b5d235555", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-aws-sdk-go-base-v2-3ccd6c5939fbb600", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-3cf5222ba0aa9337", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-binary-jdk-3cf5330955a84ab1", "relatedSpdxElement": "SPDXRef-File-...opt-java-openjdk-release-b32bc18bc276b117", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aymanbagabas-go-osc52-v2-3d7292ae0be0db1e", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-detectors-gcp-3dbe8fb028253bc2", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-python-tabulate-3e262514354ce16d", "relatedSpdxElement": "SPDXRef-File-...test-quality-requirements.txt-ded6f74ec82f3199", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-3ec7a7d1906b7db3", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gkampitakis-ciinfo-3ecfbf738588f0de", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bgentry-go-netrc-3f2fc36fc7257f16", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-exp-3f5af6d1997471c6", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-version-3f627e94736035cd", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-checkout-3f9a0fbf14a5bdc4", "relatedSpdxElement": "SPDXRef-File-....github-workflows-validations.yaml-ad929689d169a6c9", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sourcegraph-conc-4019ec68de2ee981", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-profile-408e2170d5c0aa6d", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-endpoints-v2-40da9e309dd93c31", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-419b179104eb109e", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-41a8099e429d2e26", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-morikuni-aec-4205bb49ac3a7a4c", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-ll-4262d68bf7255e4d", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-dotnet-Serilog.Sinks.Console-428ca9e2778d8a6f", "relatedSpdxElement": "SPDXRef-File-...dotnet-TestLibrary.deps.json-3106215bcb53f2d1", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-43dd7739aa469207", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-44163de5007e6449", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-hackage-spdx-449fc4c88dd8be98", "relatedSpdxElement": "SPDXRef-File-...haskell-stack.yaml-a0328ff80d56d97d", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-hackage-hspec-core-44ae212da2d95c23", "relatedSpdxElement": "SPDXRef-File-...haskell-stack.yaml-a0328ff80d56d97d", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-458f9251810739a4", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-xo-terminfo-470cccbaad5c75a4", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-cmp-473d0adb4b419c7e", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-minio-minlz-47690e386e77bbf3", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-4798824adf3f0c97", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-sync-4875839892d70300", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-489ab249cc2e5be9", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-iam-48ab872a9f3d2f71", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-afero-48b5ac7707000756", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pquerna-cachecontrol-49504ad6cb36edba", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-inconshreveable-mousetrap-4961dbf7adbf98ca", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go4.org-496e597a7e464f67", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tidwall-sjson-49ec4e4ca8468b25", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-nix-community-go-nix-4a26384751caf982", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-mod-4a27469cc352a0fc", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-4a60e6f3f9cac2b0", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-4a9b49ab2a1c2f38", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-buger-jsonparser-4b987807401373b5", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gocsaf-csaf-v3-4bd9ec16e5b86a68", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-gorm.io-gorm-4c458b1192ddedc0", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-4c6e94db00098859", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-rust-secure-code-go-rustaudit-4c8c544e4828b6a0", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-cat-4d94768862b88c20", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-workflow-anchore-workflows-.github-workflows-release-install-script.yaml-4d9c0cd0067bb2ee", "relatedSpdxElement": "SPDXRef-File-....github-workflows-release.yaml-d103172c0041c1c4", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-config-4e066468f0e8e9cb", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-4e20e0d091a2600a", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-dotnet-Microsoft.Extensions.Logging.Abstractions-4e22cf2bcfe9455c", "relatedSpdxElement": "SPDXRef-File-...dotnet-TestLibrary.deps.json-3106215bcb53f2d1", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-log-4e3b1ca6b33bf8f3", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-4ef0b3e8a43b68e2", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbletea-4f4c9ead917998d6", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-api-4f4ed3d8cb92c940", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-4fc93c87aeebc64b", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-exp-4fe995c7f92fafc3", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-50226e5d4bbd723b", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cel.dev-expr-50296d5ce895996f", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-acobaugh-osrelease-50ac6b3f804ae772", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-envoyproxy-protoc-gen-validate-50ebd3003a0dd4eb", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-client-510c5701256fab0b", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-smallnest-ringbuffer-511ce693d405a06f", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-dotnet-Newtonsoft.Json-513f38c30b10f650", "relatedSpdxElement": "SPDXRef-File-...dotnet-TestLibrary.deps.json-3106215bcb53f2d1", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-518d951fe65e50b3", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-syft-519eb55e8227c328", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pborman-indent-524c97205bf0dd4a", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bitnami-go-version-528e02e8461a15c8", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-python-dataclass-wizard-52f7dbbe307282d0", "relatedSpdxElement": "SPDXRef-File-...test-quality-requirements.txt-ded6f74ec82f3199", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-shlex-5307b82659ec16f4", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-therootcompany-xz-532453fd4b43c144", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-viper-53bb8bba12e970aa", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cloudflare-circl-5469dd14292c730b", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-54e8f7218aa059c0", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-logger-5534b09cb8c7a0a6", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-hackage-HTTP-55a45cfeed478a3f", "relatedSpdxElement": "SPDXRef-File-...haskell-stack.yaml.lock-ba4762468992c29c", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-rpmdb-5638b9d10ee77a25", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-credentials-564f4f75a2fd353c", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-56b7e6360dd390d7", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sso-56b81e8ec393907a", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-cache-56bec8cbbf261603", "relatedSpdxElement": "SPDXRef-File-....github-workflows-validations.yaml-ad929689d169a6c9", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-mod-56d232e7120c3a8b", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-lipgloss-5717a8e54439ceaf", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-afero-577ab40ea4ceaedf", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Intevation-gval-5809dfa1bbb1e430", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-scylladb-go-set-580d79f1c5557fa8", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mgutz-ansi-588bd007cbd0bf70", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-oauth2-59074934b0cd2f37", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kr-pretty-596dbedcdbaa87e3", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-distribution-reference-5abfaf7335d7e3ca", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-5ad1218512f08dac", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-xi2-xz-5aff0dfb6bddc19f", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-apk-libvncserver-5b91062e766611f9", "relatedSpdxElement": "SPDXRef-File-...lib-apk-db-installed-4ee5bd663f018994", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-5b92054f073affe6", "relatedSpdxElement": "SPDXRef-File-...golang-testdata-gobin-xnet-html-go.mod-430658a3eb617e32", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-rpm-dive-5c1f992459445754", "relatedSpdxElement": "SPDXRef-File-...var-lib-rpm-Packages-1399863a198cbc98", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-accept-encoding-5c3ac09cf4317999", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-displaywidth-5c8b2642db8ea713", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-5c9326c6ce9315fe", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-5cd65f4253c81a65", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-distribution-reference-5cf5bbf310c710d0", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-hackage-hspec-discover-5d0fbe70c542ce4b", "relatedSpdxElement": "SPDXRef-File-...haskell-stack.yaml-a0328ff80d56d97d", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-xo-terminfo-5d31e9a19340722b", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-rust-secure-code-go-rustaudit-5e103b6f10fbeebc", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aquasecurity-go-version-5e2106a6cbb36dcd", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-CycloneDX-cyclonedx-go-5f0109a749bf9b17", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-displaywidth-5f184d5c9f496346", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-5f4c52f8605b42db", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-5ffdba78d077a51b", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-python-yardstick-6061edcbf25c040d", "relatedSpdxElement": "SPDXRef-File-...test-quality-requirements.txt-ded6f74ec82f3199", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-git-go-git-v5-60d97eba3e94ba3a", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-60f22c630e98f3bd", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-mathutil-610e3c135e640d33", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-howett.net-plist-611dfc0e7c7a7dcb", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-nwaples-rardecode-v2-61ed5aa217767dd4", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-presigned-url-61f8c0ab0d447a58", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-xattr-6223a1a56b452ce1", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-harmonica-6231599fb0a27c1d", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-checksum-631dc73cc1715f47", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spdx-tools-golang-6333ded3cfe1ec0d", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-macholibre-6353d78fb09b946a", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-63efd6ebb5d1e9e9", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-63ff3cc2eea97f28", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Intevation-gval-641887a64183bbd6", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-64224fe56b48ea1d", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-wagoodman-go-presenter-647419a50734dd7f", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-6480d35d13b6feaa", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jbenet-go-context-64c893e3154f24c3", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-agext-levenshtein-64d88b1cfcc4917a", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-rpmdb-6521ac4d2848b411", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-x-ansi-6552ffc18e8afe1f", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-660a1132eb0c981a", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gohugoio-hashstructure-6736c6550c52be1f", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-67f4a4f8963e35c5", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Microsoft-hcsshim-681684c6c568f18c", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-683fad220f58d434", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-in-toto-attestation-685cf7e8830d2ed0", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-wagoodman-go-partybus-688cb61f27aac558", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-68d3b962d07abc2f", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-glebarez-sqlite-68e4a808f7195d7c", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kevinburke-ssh-config-69ac9358ec67970a", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-69e67edfc2286e18", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-6aa0ba1322b99f59", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-iancoleman-strcase-6b3592ba2329da13", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-iam-6b4ac685814b02f9", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-6c6a1785787b5a4d", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-6d5b046a5726eafa", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-checkout-6d6bc3b5b2f32b00", "relatedSpdxElement": "SPDXRef-File-....github-workflows-release.yaml-d103172c0041c1c4", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bodgit-plumbing-6d6f0fe22579da8e", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-6d8d86ef9fe513ea", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-sqlite-6db33cdca5cac74f", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-signin-6e67e04f079df2cb", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-cli-6f07da6ba89d5570", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kevinburke-ssh-config-6f6f3dccfa565954", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-6fd4058463b1fd70", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-dotnet-Microsoft.Extensions.DependencyInjection.Abstractions-7059ca95fdc96525", "relatedSpdxElement": "SPDXRef-File-...dotnet-TestLibrary.deps.json-3106215bcb53f2d1", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-bubbly-70cc25030abcb0ab", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v4-70cd0b1898788493", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-70fa100f612ace84", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jinzhu-now-70ffb4ce7823ff12", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-71119c1eb15a00f5", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fatih-color-71360e4063543be3", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-716c668b92999095", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-73ac7fbf7679b398", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jinzhu-copier-742f7434b7b895e0", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pquerna-cachecontrol-7446895663010f14", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-facebookincubator-nvdtools-7449b3696de286e0", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-detectors-gcp-751a1e252825ce64", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-monitoring-75a7cca604679775", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-localereader-7665900dafdbc80e", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-log-776746ff425dcb22", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-7784241df9ad0fe0", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spdx-gordf-77b6a97fae96f2c5", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-envoyproxy-go-control-plane-envoy-77d8e9d5a1ad9592", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-umisama-go-cpe-77f1e0e18a85a53f", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-7837bc368c6abc6d", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-stereoscope-786469d1760bb790", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-oauth2-78c10eb5d81f36d3", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-stereoscope-792a182a6cbaa920", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-collections-795357fa4abf712f", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jinzhu-inflection-7986b8830e14b933", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-79be6d7b25fd4626", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-hackage-OneTuple-7a0cc949cd177235", "relatedSpdxElement": "SPDXRef-File-...haskell-cabal.project.freeze-e33aa1a403ab8fd4", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bodgit-windows-7a39a002e41fba22", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-xerrors-7a5c4b13633fe5f4", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-7b531bd2b39d3f62", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-exporter-metric-7b6a8b94ad8ca016", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-libc-7c2e7d67ac7410ce", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jinzhu-inflection-7c43b08cd568963a", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-struct-converter-7c48e4f28be82025", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-buger-jsonparser-7d72add1f6e297c5", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-7d7a97212f5aa915", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-detectors-gcp-7e1fb507b515a82d", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fatih-color-7ebedeaf520cc1eb", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-version-7ed7570dd0bf861d", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-continuity-7f1a611b3f9137b4", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hako-durafmt-7f31083339fa3e12", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-goccy-go-yaml-7f64f219e5750427", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-7f7618e5b9c335d1", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-blakesmith-ar-7f9cdbbae395f22f", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-signal-7fbf81d1a66cbfbf", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-bubbly-7fd82296e1771eb5", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-api-80bb97ee6691e197", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-OneOfOne-xxhash-82acb88b9086edae", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-remyoudompheng-bigfft-82caff8370081f6f", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v4-82de4183b05be72f", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bodgit-sevenzip-82fa7f489be20976", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kastenhq-goversion-83043a42b42f6e2c", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-8353c61fc244d2bb", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-838e981d41a122f8", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-83a5b45aad341756", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-test-deep-83b71898925befa2", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-s2a-go-83e4bfe2eec9c3b5", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-dustin-go-humanize-8432997ae2bcf2c7", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-84f227628c1b2ced", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-licensecheck-8505a05a46d1b815", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gkampitakis-go-snaps-859e3d70396d3bcc", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-homedir-859f99cb1a2f8747", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-ossf-scorecard-action-86495b7307b61fb5", "relatedSpdxElement": "SPDXRef-File-....github-workflows-scorecards.yaml-e6aaf1d12fce76fe", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-x-term-8680b2b8c12b14e2", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-86af37b79a61afc1", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-8792dfeacf365a8a", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jinzhu-copier-88273d94b55e7a26", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-8915d6e41608a2d6", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-.-.github-actions-bootstrap-8956e6c98cc9c76e", "relatedSpdxElement": "SPDXRef-File-....github-workflows-release.yaml-d103172c0041c1c4", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-fgprof-897949eb0b027cfe", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-89828cd946b73006", "relatedSpdxElement": "SPDXRef-File-...golang-go.mod-5ece918845b351cc", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-xattr-89a3cbecc17d0e75", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opencensus.io-89c940803c2a6293", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vifraa-gopom-89cfb173efbe9d44", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-dario.cat-mergo-8a417a55484d15ee", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-stretchr-testify-8a8e274d66d54652", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-warnings.v0-8ac617c9f7dfb7cd", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-smithy-go-8af76b4b194ffa7f", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-lzo-8b2e33fea520a2b3", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-download-artifact-8c8cae86d32194e4", "relatedSpdxElement": "SPDXRef-File-....github-workflows-validations.yaml-ad929689d169a6c9", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-iancoleman-strcase-8d147435ded5ca4c", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ncruces-go-strftime-8dded9db9bf04e66", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-hackage-ptr-8dea2c4dce05107d", "relatedSpdxElement": "SPDXRef-File-...haskell-stack.yaml.lock-ba4762468992c29c", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-hackage-hspec-8dec45f676526a18", "relatedSpdxElement": "SPDXRef-File-...haskell-stack.yaml-a0328ff80d56d97d", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-python-pygments-8df22a295e7d036c", "relatedSpdxElement": "SPDXRef-File-...python-dist-info-top-level.txt-6978cb1601d8a1bd", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-python-pygments-8df22a295e7d036c", "relatedSpdxElement": "SPDXRef-File-...python-dist-info-METADATA-7401f466c67cd18f", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-agext-levenshtein-8e30e3ed7b06c3f2", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-fangs-8e3b2ed4b9aff635", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-dotnet-AWSSDK.Core-8e7a0987c8b015fd", "relatedSpdxElement": "SPDXRef-File-...dotnet-TestLibrary.deps.json-3106215bcb53f2d1", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-zyedidia-generic-8f85bec2897890c7", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cncf-xds-go-8f94fd943c978725", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-compress-904139e84814eed7", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-libc-9055c56cfa7635bd", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-DataDog-zstd-9062407500acc1db", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-90cdda88980ab61c", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-storage-90cdefcb212ade70", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-licensecheck-90d357fe0a30faf0", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-package-url-packageurl-go-90da91c7744b3bd4", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-time-90e57fc7c651498e", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-912d0981a4a0e36c", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-91773dfed6d98319", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-git-gcfg-9363818d11b9e55a", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-rpm-dive-93b614c01c957d36", "relatedSpdxElement": "SPDXRef-File-...var-lib-rpm-Packages-9ce3e68ca9f76e04", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-93c6bb4d47b6a45b", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-atomicwriter-942b88e617406db1", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v4-94526eb1baaee54e", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-.make-go.mod-f5109dc18f6da530", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-9500bbb18a20f8fd", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-muesli-cancelreader-952b970833d2dae7", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-957f5515924b3e23", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kr-text-959f0623ba8434ee", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-diskfs-go-diskfs-95e534d2b9953041", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-saintfish-chardet-95e74062d1eb7935", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-acobaugh-osrelease-9624c84676a6128e", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-9629f04d1b10a6ad", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-DataDog-zstd-964cf0e7c346a4e7", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-internal-resourcemapping-966cccaf87fde20d", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-96770404d2af75ce", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-96ef1b4764997197", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-97388b36b6b457a6", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-979663e49283059d", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pjbgf-sha1cd-979f54ed2119ffe6", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbles-97cfbf7b3355753f", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-emirpasic-gods-9882f7bacdc174a6", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-userns-98a13d1d25bd81ba", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbatts-go-mtree-98d17fd6f931f523", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-9903b7930f5fcede", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-binary-busybox-991efd3425f4bb08", "relatedSpdxElement": "SPDXRef-File-...distro-testdata-os-busybox-bin-busybox-210dd1c29da0b37f", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-993ea55f7ccdb0d0", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-andybalholm-brotli-995fb94043b5e40b", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-hackage-QuickCheck-996cd0eb5b1dc7ec", "relatedSpdxElement": "SPDXRef-File-...haskell-cabal.project.freeze-e33aa1a403ab8fd4", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-checkout-9a0e6b39a6bba50e", "relatedSpdxElement": "SPDXRef-File-....github-workflows-scorecards.yaml-e6aaf1d12fce76fe", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-9a81c488f3ad8d93", "relatedSpdxElement": "SPDXRef-File-...testdata-gobin-xnet-http2server-go.mod-b08c253cc83d6f82", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go4.org-9af3b7878e4b5c1f", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-v4a-9afd6e90078d3966", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-masahiro331-go-mvn-version-9b9ca54608bc3cdc", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-golang-groupcache-9ba43ef89138f46f", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-9c3ce79e595a4342", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gogo-protobuf-9d2815b4087c2824", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-owenrumney-go-sarif-9dc42c14c6ffb775", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pjbgf-sha1cd-9e41dfa71d0745e8", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-git-gcfg-9e7047dc06a3a8b0", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-9ee8f882f81cf745", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-ll-9eebc3ddf477ca22", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-9f66238c5f4411e5", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-git-go-git-v5-9fc26012aa6c7546", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-a00544d9cf935bfa", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bodgit-sevenzip-a0079555443c94fe", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-api-a011d526f6a3613d", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-hackage-HTTP-a04bfb423cd4e5bd", "relatedSpdxElement": "SPDXRef-File-...haskell-cabal.project.freeze-e33aa1a403ab8fd4", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-a08603254284a9b5", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-a0b833e866fd1de5", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-muesli-ansi-a0cb089e18185ff6", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-a10c4025d310d547", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-compress-a1156147601ced7b", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-a26e9a05ef93c2a9", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-json-iterator-go-a2a9ed90cdb5e7e1", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-aws-protocol-eventstream-a2b5c5f52a166637", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-erikgeiser-coninput-a328e450f99eeeba", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-howett.net-plist-a367099a7cb19630", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-a36fc4a176d0ee4a", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-a3883bc5333631e4", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-xanzy-ssh-agent-a40a80bb17249690", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mikelolasagasti-xz-a46d24aed8403d91", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-struct-converter-a4fa0821b2842a4b", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-a569b4682e0d9975", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-a58f1e964cc00109", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pb33f-ordered-map-v2-a5d4470f38247c26", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-rogpeppe-go-internal-a7723e2c1ea652b3", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-checkout-a7771f8c09ba063b", "relatedSpdxElement": "SPDXRef-File-...workflows-validate-github-actions.yaml-e17b422c5008a06c", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-example-java-app-maven-a7a11a8dd6012208", "relatedSpdxElement": "SPDXRef-File-...java-example-java-app-maven-0.1.0.jar-5abe306439090291", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-memory-a7fc43f05c222875", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-envoyproxy-go-control-plane-envoy-a8616ba298930e9f", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-a89e3751f7ab60f1", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-units-a9271522b4f3233c", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sorairolake-lzip-go-a97581a03c6becaf", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbatts-go-mtree-a97e83346825d999", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aquasecurity-go-version-aa7d699d45c2530e", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-cgroups-v3-aa9d8549cb3cc99f", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-maruel-natural-aad9659cddb5d972", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spiffe-go-spiffe-v2-aae517762df2df52", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-aaf4307e8bf5eb4c", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-lipgloss-ab168d64bd3af37b", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-restruct-restruct-ab894547f3216718", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Microsoft-go-winio-abafb068811b268a", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-apk-npm-apk-subpackage-with-false-positive-ac599a0cbbf682cd", "relatedSpdxElement": "SPDXRef-File-...lib-apk-db-installed-4ee5bd663f018994", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-getter-ac68d1815c73bbf0", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-xanzy-ssh-agent-ac773c6b2614e9e1", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-s2a-go-ac7cd253b4e1753e", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bahlo-generic-list-go-acb5254b1bc7a3f2", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-warnings.v0-ad01776c7dce5d1f", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-STARRY-S-zip-ad044ed4fb9205e9", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-muesli-termenv-ad3bdda0acac034d", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-dotnet-TestCommon-ae2cc3cff261601c", "relatedSpdxElement": "SPDXRef-File-...dotnet-TestLibrary.deps.json-3106215bcb53f2d1", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-internal-resourcemapping-af24c13b8f8446ad", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-b01107ac095a2922", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-hackage-language-docker-b051fe983f986608", "relatedSpdxElement": "SPDXRef-File-...haskell-stack.yaml-a0328ff80d56d97d", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-glebarez-go-sqlite-b1404a6a7e23cf96", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gpustack-gguf-parser-go-b14f8c1f2e55722f", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-b199fcf302d10783", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-remyoudompheng-bigfft-b1ee59cbc8bb1a32", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-santhosh-tekuri-jsonschema-v6-b26018fb0634b0f4", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-github-codeql-action-upload-sarif-b2cc4e751bdbff23", "relatedSpdxElement": "SPDXRef-File-....github-workflows-scorecards.yaml-e6aaf1d12fce76fe", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-araddon-dateparse-b339469668eed6d2", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-accept-encoding-b36fab65d70c529f", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-errors-b37731489e65ea4f", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-b3d879cd60d2aaba", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-hackage-ShellCheck-b42715fd69470b2f", "relatedSpdxElement": "SPDXRef-File-...haskell-stack.yaml-a0328ff80d56d97d", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-maruel-natural-b46de64980aad7a8", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-henvic-httpretty-b48854afa73ed5e9", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-in-toto-attestation-b49317b38e020536", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-ssooidc-b51e2248695a983d", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v2-b59b1d1e79d7ea11", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-dotnet-TestLibrary-b5f66243fe64203d", "relatedSpdxElement": "SPDXRef-File-...dotnet-TestLibrary.deps.json-3106215bcb53f2d1", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-dotnet-Serilog-b7113daa72cb3644", "relatedSpdxElement": "SPDXRef-File-...dotnet-TestLibrary.deps.json-3106215bcb53f2d1", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-json-iterator-go-b71b97451ba45321", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cast-b759ce340b0f2e0e", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kr-pretty-b76d4050a948c5b8", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-b7d4f247b89d48d9", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-b85cbf72c4d015b1", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-rivo-uniseg-b8c0bf8d033d75ba", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-lucasb-eyer-go-colorful-b90a07410a5270a8", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-term-b9d932bf025cdc58", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-profile-ba1a14fd8b7b2f72", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-ba216fed2a0d570f", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-henvic-httpretty-ba82f7943cba0b8a", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-ba8d2ab961878e02", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-git-go-billy-v5-ba992b50ca69d442", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-hackage-SHA-baed4c25dd9aaa11", "relatedSpdxElement": "SPDXRef-File-...haskell-cabal.project.freeze-e33aa1a403ab8fd4", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-skeema-knownhosts-baf110c890c63110", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-bb0aa2b6ed288b02", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-tools-bb0af48b1df4021b", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-invopop-jsonschema-bb26c5b35bf87043", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-clio-bb46ad15420b0bf0", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cncf-xds-go-bb6d4947b9e4a6f1", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-package-url-packageurl-go-bc4e0ee26b6000bf", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-huandu-xstrings-bca5c55326f930d7", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jbenet-go-context-bcb720b429ff9158", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-cli-bcefd6de8b76e6f7", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-golang-groupcache-bd00e3e04a73c5bc", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gogo-protobuf-bd0ec7045718a6c6", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pborman-indent-bd70889000a4b095", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-STARRY-S-zip-bdc86415dd293a9e", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-dsnet-compress-be3aa40eb3d00bc6", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-dave-jennifer-be9c0054c83ff877", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-cat-bebcd8c7e0abbf91", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-bed4d1bdb0281132", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-muesli-ansi-bf26c8fc89989d9d", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-errors-bf4c93150e139994", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-knqyf263-go-deb-version-c0b14cb096a6df1f", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-mathutil-c1298f2812899ed6", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-c14bc92e6fc464c8", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-santhosh-tekuri-jsonschema-v6-c20b008a43f442ea", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-exporter-metric-c2284fdaf11798b9", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-aws-sdk-go-base-v2-c2bad78f077aaf53", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-therootcompany-xz-c2dc462e8d76e9d3", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gkampitakis-ciinfo-c303288e26fa3dd8", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-becheran-wildmatch-go-c3e582c1d8b61130", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-logger-c436ee9ed3fa26ff", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-ssooidc-c43aa8f0a029e25e", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-dotnet-Microsoft.Extensions.Options-c567666f1d3eabf3", "relatedSpdxElement": "SPDXRef-File-...dotnet-TestLibrary.deps.json-3106215bcb53f2d1", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-colorprofile-c5918b9259778ca9", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bitnami-go-version-c59c7a823bb0703f", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-wagoodman-go-progress-c5dd24b2be916e24", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-c632809b2eab0c3a", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-syft-c7350b5cdf82ecc4", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-c82cca5370c47267", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-credentials-c857529e5f4cd746", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-signin-c886881dd51cdcf6", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mikelolasagasti-xz-c913b3f0fe644db3", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-ca00a006fca1e729", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-wagoodman-go-partybus-ca295408c72c3589", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-ca67e04589c6607d", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-anchore-sbom-action-ca892260c3eeccf9", "relatedSpdxElement": "SPDXRef-File-....github-workflows-release.yaml-d103172c0041c1c4", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-hackage-optparse-applicative-cab0662d28cc5acc", "relatedSpdxElement": "SPDXRef-File-...haskell-stack.yaml.lock-ba4762468992c29c", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sassoftware-go-rpmutils-cc1a1dbe4057c7de", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-sigstore-cosign-installer-cc1df9a3429cbc80", "relatedSpdxElement": "SPDXRef-File-....github-workflows-validations.yaml-ad929689d169a6c9", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-ccb03ddcd5d95d47", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-term-cd7992b205dbcbfe", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-hackage-configurator-pg-ce7715bafa9829fa", "relatedSpdxElement": "SPDXRef-File-...haskell-stack.yaml.lock-ba4762468992c29c", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sts-ce82306954a0fe9e", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-locker-ceeed92adeb41d79", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-saintfish-chardet-cf5ea227de9a83a7", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mgutz-ansi-cf6d167250b83896", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bahlo-generic-list-go-cf8afb4116b83830", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sourcegraph-conc-cfbd747de78458fc", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-d0186ce91c94c19b", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-gorm.io-gorm-d0a76ddfbc00d7a3", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-d0f76cbf0caf583d", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-x-ansi-d16466e5c11c9c7c", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-lucasb-eyer-go-colorful-d229ca92394c07d7", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aquasecurity-go-pep440-version-d22de760b0b61502", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-adrg-xdg-d389c0dbfcd56b17", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-d39d8b735782a363", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-dave-jennifer-d45c2a6ed6372d51", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-stretchr-testify-d64a25dace8d069c", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-s3-d67703f2e3967565", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-d6e204d5b39cc3d9", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sts-d6ee70a441172c0c", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-time-d71278c90eda02b0", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-cpuid-v2-d80cd4af33eaf8e3", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-hackage-Cabal-d81b0adcb28dbe75", "relatedSpdxElement": "SPDXRef-File-...haskell-cabal.project.freeze-e33aa1a403ab8fd4", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-d91b6d6201c35c75", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-d99b2f24b8ed3ba7", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-d9a0d5e4a761c6e0", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-d9cda6fdda56a8b2", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-da1c8a91f8418476", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-x-cellbuf-da86d400c320b7cd", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-db9b423947e22092", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-gonum.org-v1-gonum-dbda39230178b89b", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-cmp-dbdeead1e743947d", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-viper-dc1a2c757928829f", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-pprof-dc71604f4aa2cdf3", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-hackage-Only-dcadd0fa648dfa04", "relatedSpdxElement": "SPDXRef-File-...haskell-cabal.project.freeze-e33aa1a403ab8fd4", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-hackage-stm-dd2962ef63785317", "relatedSpdxElement": "SPDXRef-File-...haskell-stack.yaml-a0328ff80d56d97d", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-elliotchance-phpserialize-dd61f858e32823a2", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-presigned-url-dd8d34dc728d3d31", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gookit-color-dd914db4ce9f5e6d", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-ddd1e2da24a21af5", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-dddc558a2e41841e", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-goccy-go-yaml-de03f883d01ca3b8", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-.make-go.mod-f5109dc18f6da530", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tidwall-pretty-de9ffa8e8830e8c4", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-adrg-xdg-df2cb66aad00b046", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-dfa0b50ab9a7e8bd", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-e01312e499e41c80", "relatedSpdxElement": "SPDXRef-File-...testdata-gobin-xnet-http2server-go.mod-b08c253cc83d6f82", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-hackage-hasql-implicits-e0da11562366ca35", "relatedSpdxElement": "SPDXRef-File-...haskell-stack.yaml.lock-ba4762468992c29c", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-configsources-e151d82ec9cffc23", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-x-term-e16502c875bce6ab", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-anchore-go-make-.github-actions-setup-e1c0652de56d1950", "relatedSpdxElement": "SPDXRef-File-....github-actions-bootstrap-action.yaml-e931ab2019105f09", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-mod-e2292a330881cf62", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-.make-go.mod-f5109dc18f6da530", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-rogpeppe-go-internal-e2dcf5ec58de86c5", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-storage-e36f92b0906149ab", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-e395ab6147e93076", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-e406d1260ec16639", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.etcd.io-bbolt-e4d5a1182416541f", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-e514dcf469e6310b", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-e59a89d299e9636a", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-cache-e5f604f7f400ff50", "relatedSpdxElement": "SPDXRef-File-....github-actions-bootstrap-action.yaml-e931ab2019105f09", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-e62b43fb06a0ac34", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-araddon-dateparse-e6631978d47b7403", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-openvex-go-vex-e70fd5510c27983b", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-cache-restore-e853b1285489ab14", "relatedSpdxElement": "SPDXRef-File-....github-actions-bootstrap-action.yaml-e931ab2019105f09", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-minio-minlz-e8b454dfa14f9606", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-tablewriter-e97fed8e76826d40", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-java-archive-joda-time-eaa4d4b3bd89d483", "relatedSpdxElement": "SPDXRef-File-...java-example-java-app-maven-0.1.0.jar-5abe306439090291", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-collections-eabcc479092bdaee", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sergi-go-diff-eadb73b749fc4f5b", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-connections-ebdd305c229aed7a", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-portage-app-containers-skopeo-ebf792934094fc8d", "relatedSpdxElement": "SPDXRef-File-...app-containers-skopeo-1.5.1-LICENSE-39b635b71a393a95", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-portage-app-containers-skopeo-ebf792934094fc8d", "relatedSpdxElement": "SPDXRef-File-...pkg-app-containers-skopeo-1.5.1-SIZE-697381618c2cc012", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-portage-app-containers-skopeo-ebf792934094fc8d", "relatedSpdxElement": "SPDXRef-File-...app-containers-skopeo-1.5.1-CONTENTS-c8ec35482567bbaa", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-go-homedir-ec0cc2636553efe9", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-fifo-ec32d4f3c1dd3d82", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-ec9ed93888749dc0", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-homedir-ed0f6ed97e979cbb", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-muesli-cancelreader-ed17cffa2ebc0d15", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-ed7921825a53d3f4", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-muesli-termenv-eda57fee892a5a88", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Microsoft-hcsshim-edfc966a019b6594", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbles-ee3bc9ebc3de1df1", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-workflow-anchore-workflows-.github-workflows-check-gate.yaml-ee68913fdcacc281", "relatedSpdxElement": "SPDXRef-File-....github-workflows-release.yaml-d103172c0041c1c4", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-fifo-ee7344eaf8bc6e76", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-xi2-xz-eef9653d73903952", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-ef025f2989091946", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-CycloneDX-cyclonedx-go-ef4801668d7f3e86", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-restruct-restruct-ef53ed4c6fbe2f06", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-harmonica-ef5d79e29712fc23", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-hackage-hasql-pool-ef7938fbe654b672", "relatedSpdxElement": "SPDXRef-File-...haskell-stack.yaml.lock-ba4762468992c29c", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-goccy-go-yaml-efc377de37bce13b", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-efcb5a205c6a76a0", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-masahiro331-go-mvn-version-f03a403f7bd55267", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tidwall-match-f03a8ca224ae40da", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pandatix-go-cvss-f0e242900b28999e", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gabriel-vasile-mimetype-f14faaa3e1dbf357", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-dotnet-Microsoft.Extensions.DependencyInjection-f1997feaecac0ce6", "relatedSpdxElement": "SPDXRef-File-...dotnet-TestLibrary.deps.json-3106215bcb53f2d1", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-f19e239bf624ade5", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-packageurl-go-f1a0779f04ec5b66", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-f1d75774f395139a", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Intevation-jsonpath-f1e9519d812fb35e", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-f1f26610dff6c5b1", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hako-durafmt-f294e38ba9d824f7", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-f3352de1ba7ae8d0", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-platforms-f424b0c135c58b76", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-shopspring-decimal-f42618a2365f1ee2", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-knqyf263-go-deb-version-f434ce9f547600a6", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-hackage-protolude-f491d96080c8bcef", "relatedSpdxElement": "SPDXRef-File-...haskell-stack.yaml.lock-ba4762468992c29c", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aquasecurity-go-pep440-version-f4faf7d97dbd3604", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-gonum.org-v1-gonum-f553e50691c64718", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-f556606ebb1221ee", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-f584eafa678eed90", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.etcd.io-bbolt-f60ad984415904f5", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-inconshreveable-mousetrap-f6300927a9f6b106", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-f6424607fde0264b", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-wagoodman-go-presenter-f690f436003173ad", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-facebookincubator-nvdtools-f69d28a391d9a839", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-hex-plug-f6db7fde905faa24", "relatedSpdxElement": "SPDXRef-File-...hex-mix.lock-f2297cbda47fc1a8", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-nix-community-go-nix-f72ee684f3cac869", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-hackage-colourista-f735d454279cf07f", "relatedSpdxElement": "SPDXRef-File-...haskell-stack.yaml-a0328ff80d56d97d", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-knqyf263-go-apk-version-f73d7373428f6f31", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-user-f7aafa6bbeddca98", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-skeema-knownhosts-f81b956f509e840a", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-dario.cat-mergo-f8c5fb54d02b3093", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sylabs-squashfs-f8ed6624f5d17237", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-smallnest-ringbuffer-f932a811bf394968", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-f9cb0ed57e859e4c", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spdx-gordf-fa860ad9fec9e692", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-s3shared-fac5e71475c122a7", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-morikuni-aec-fb1bc5562878f05a", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Microsoft-go-winio-fc378e330b798bc4", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-golang-lru-v2-fc804484ec9835b3", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bodgit-plumbing-fd079dd44ff9aef7", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-fd71c35e086458fc", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-fdcd0f78d56ec20a", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tidwall-pretty-fdfa75cc6c742ae7", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-.-.github-actions-bootstrap-fe2a7dfdfcfcd11a", "relatedSpdxElement": "SPDXRef-File-....github-workflows-validations.yaml-ad929689d169a6c9", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-fe6325d9f26829a3", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-diskfs-go-diskfs-fe9866484f84562c", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-blakesmith-ar-ff09d561baf8e717", "relatedSpdxElement": "SPDXRef-File-grype-0.119.0-go.mod-f0a6909398373b16", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tailscale-hujson-ffc85ce01e80d1df", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-.-.github-actions-bootstrap-8956e6c98cc9c76e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-.-.github-actions-bootstrap-fe2a7dfdfcfcd11a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-dotnet-AWSSDK.Core-8e7a0987c8b015fd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-hackage-Cabal-d81b0adcb28dbe75", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-hackage-Diff-38843e84cb58524e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-hackage-HTTP-a04bfb423cd4e5bd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-hackage-HTTP-55a45cfeed478a3f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-hackage-HUnit-31160b35319dd704", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-dotnet-Microsoft.Extensions.DependencyInjection-f1997feaecac0ce6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-dotnet-Microsoft.Extensions.DependencyInjection.Abstractions-7059ca95fdc96525", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-dotnet-Microsoft.Extensions.Logging-2c9972b4a182c6e4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-dotnet-Microsoft.Extensions.Logging.Abstractions-4e22cf2bcfe9455c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-dotnet-Microsoft.Extensions.Options-c567666f1d3eabf3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-dotnet-Microsoft.Extensions.Primitives-0e65bdf9a3c51500", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-dotnet-Newtonsoft.Json-513f38c30b10f650", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-hackage-OneTuple-7a0cc949cd177235", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-hackage-Only-dcadd0fa648dfa04", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-hackage-PyF-25c350a6b69e7297", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-hackage-QuickCheck-996cd0eb5b1dc7ec", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-hackage-RSA-192809b5e448215d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-hackage-SHA-baed4c25dd9aaa11", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-dotnet-Serilog-b7113daa72cb3644", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-dotnet-Serilog.Sinks.Console-428ca9e2778d8a6f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-hackage-ShellCheck-b42715fd69470b2f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-hackage-Spock-29efad8c122541e6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-dotnet-TestCommon-ae2cc3cff261601c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-dotnet-TestLibrary-b5f66243fe64203d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-cache-e5f604f7f400ff50", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-cache-56bec8cbbf261603", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-cache-restore-e853b1285489ab14", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-checkout-6d6bc3b5b2f32b00", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-checkout-9a0e6b39a6bba50e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-checkout-a7771f8c09ba063b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-checkout-3f9a0fbf14a5bdc4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-download-artifact-8c8cae86d32194e4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-setup-python-097c0506c599a1b5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-upload-artifact-00a212884b440034", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-anchore-go-make-.github-actions-setup-e1c0652de56d1950", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-anchore-sbom-action-ca892260c3eeccf9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-workflow-anchore-workflows-.github-workflows-check-gate.yaml-ee68913fdcacc281", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-workflow-anchore-workflows-.github-workflows-check-version-available.yaml-0a4c6c1fe2e4b66a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-workflow-anchore-workflows-.github-workflows-codeql.yaml-0bff96f8231700d7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-workflow-anchore-workflows-.github-workflows-release-install-script.yaml-4d9c0cd0067bb2ee", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-portage-app-containers-skopeo-ebf792934094fc8d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-deb-apt-3ba8292752e73177", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-gem-bundler-06fbad6866ac85ac", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-binary-busybox-991efd3425f4bb08", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-cel.dev-expr-50296d5ce895996f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-cel.dev-expr-20509c9d2dbe5cf0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-419b179104eb109e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-a10c4025d310d547", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-auth-84f227628c1b2ced", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-auth-c82cca5370c47267", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-db9b423947e22092", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-4c6e94db00098859", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-c14bc92e6fc464c8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-3840e907ad45a616", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-iam-6b4ac685814b02f9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-iam-48ab872a9f3d2f71", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-monitoring-170165bad3bf32a9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-monitoring-75a7cca604679775", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-storage-90cdefcb212ade70", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-storage-e36f92b0906149ab", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-python-codespell-1ffc391c48fb0ae8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-hackage-colourista-f735d454279cf07f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-hackage-configurator-pg-ce7715bafa9829fa", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-dario.cat-mergo-8a417a55484d15ee", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-dario.cat-mergo-f8c5fb54d02b3093", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-python-dataclass-wizard-52f7dbbe307282d0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-rpm-dive-5c1f992459445754", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-rpm-dive-93b614c01c957d36", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-docker-login-action-1c412d41e9b3d112", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-example-java-app-maven-a7a11a8dd6012208", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-6d8d86ef9fe513ea", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-67f4a4f8963e35c5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-CycloneDX-cyclonedx-go-5f0109a749bf9b17", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-CycloneDX-cyclonedx-go-ef4801668d7f3e86", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-DataDog-zstd-9062407500acc1db", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-DataDog-zstd-964cf0e7c346a4e7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-detectors-gcp-0af171990b46e990", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-detectors-gcp-7e1fb507b515a82d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-exporter-metric-c2284fdaf11798b9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-exporter-metric-7b6a8b94ad8ca016", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-internal-resourcemapping-966cccaf87fde20d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-internal-resourcemapping-af24c13b8f8446ad", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Intevation-gval-641887a64183bbd6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Intevation-gval-5809dfa1bbb1e430", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Intevation-jsonpath-17b0206d8e174038", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Intevation-jsonpath-f1e9519d812fb35e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-4a60e6f3f9cac2b0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-91773dfed6d98319", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-bb0aa2b6ed288b02", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-005f8f7262d859c0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-17921bc3f2f4444b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-0faef477ce29ac7b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Microsoft-go-winio-fc378e330b798bc4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Microsoft-go-winio-abafb068811b268a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Microsoft-hcsshim-edfc966a019b6594", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Microsoft-hcsshim-681684c6c568f18c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-OneOfOne-xxhash-188589ff7ba0a040", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-OneOfOne-xxhash-82acb88b9086edae", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-6d5b046a5726eafa", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-979663e49283059d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-STARRY-S-zip-bdc86415dd293a9e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-STARRY-S-zip-ad044ed4fb9205e9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-83a5b45aad341756", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-f584eafa678eed90", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-acobaugh-osrelease-9624c84676a6128e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-acobaugh-osrelease-50ac6b3f804ae772", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-adrg-xdg-d389c0dbfcd56b17", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-adrg-xdg-df2cb66aad00b046", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-agext-levenshtein-64d88b1cfcc4917a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-agext-levenshtein-8e30e3ed7b06c3f2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-bubbly-70cc25030abcb0ab", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-bubbly-7fd82296e1771eb5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-clio-0ca4696fdd0313fb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-clio-bb46ad15420b0bf0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-fangs-135612021b16f6db", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-fangs-8e3b2ed4b9aff635", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-collections-eabcc479092bdaee", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-collections-795357fa4abf712f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-homedir-859f99cb1a2f8747", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-homedir-ed0f6ed97e979cbb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-logger-5534b09cb8c7a0a6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-logger-c436ee9ed3fa26ff", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-lzo-20f68955a698b8ba", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-lzo-8b2e33fea520a2b3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-macholibre-6353d78fb09b946a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-macholibre-2574360ef88fad6d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-make-38f7c1ef68e05752", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-rpmdb-5638b9d10ee77a25", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-rpmdb-6521ac4d2848b411", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-struct-converter-a4fa0821b2842a4b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-struct-converter-7c48e4f28be82025", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-sync-4875839892d70300", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-sync-27bb9c28e5b6aa36", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-version-3f627e94736035cd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-version-7ed7570dd0bf861d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-packageurl-go-376fa79c3055fefd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-packageurl-go-f1a0779f04ec5b66", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-stereoscope-786469d1760bb790", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-stereoscope-792a182a6cbaa920", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-c7350b5cdf82ecc4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-519eb55e8227c328", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-andybalholm-brotli-244bcfc9c9eb6201", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-andybalholm-brotli-995fb94043b5e40b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-e406d1260ec16639", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-489ab249cc2e5be9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aquasecurity-go-pep440-version-f4faf7d97dbd3604", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aquasecurity-go-pep440-version-d22de760b0b61502", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aquasecurity-go-version-5e2106a6cbb36dcd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aquasecurity-go-version-aa7d699d45c2530e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-araddon-dateparse-e6631978d47b7403", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-araddon-dateparse-b339469668eed6d2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-efcb5a205c6a76a0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-ca00a006fca1e729", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-aws-protocol-eventstream-1d31bbfdcf4c518d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-aws-protocol-eventstream-a2b5c5f52a166637", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-config-37158a30ef86835b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-config-4e066468f0e8e9cb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-credentials-564f4f75a2fd353c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-credentials-c857529e5f4cd746", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-feature-ec2-imds-3a0151868a8d31fe", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-feature-ec2-imds-153a8c245aa59267", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-configsources-e151d82ec9cffc23", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-configsources-28b18aa59cb5efe0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-endpoints-v2-2a89bbfede5b08b7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-endpoints-v2-40da9e309dd93c31", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-v4a-9afd6e90078d3966", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-v4a-3ad8a28e5cba1573", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-accept-encoding-5c3ac09cf4317999", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-accept-encoding-b36fab65d70c529f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-checksum-631dc73cc1715f47", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-checksum-321e893ca7a203e7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-presigned-url-dd8d34dc728d3d31", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-presigned-url-61f8c0ab0d447a58", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-s3shared-0d56695f376e4179", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-s3shared-fac5e71475c122a7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-s3-235824f55444fe72", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-s3-d67703f2e3967565", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-signin-6e67e04f079df2cb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-signin-c886881dd51cdcf6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sso-56b81e8ec393907a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sso-0f97466c0888a006", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-ssooidc-b51e2248695a983d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-ssooidc-c43aa8f0a029e25e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sts-ce82306954a0fe9e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sts-d6ee70a441172c0c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-smithy-go-16becfb2765ec82a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-smithy-go-8af76b4b194ffa7f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aymanbagabas-go-osc52-v2-3d7292ae0be0db1e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aymanbagabas-go-osc52-v2-03b6e9ac04130b97", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bahlo-generic-list-go-cf8afb4116b83830", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bahlo-generic-list-go-acb5254b1bc7a3f2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-becheran-wildmatch-go-c3e582c1d8b61130", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-becheran-wildmatch-go-2bb58d89fe5dbfbc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bgentry-go-netrc-3f2fc36fc7257f16", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bgentry-go-netrc-21828244d7792b9a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bitnami-go-version-c59c7a823bb0703f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bitnami-go-version-528e02e8461a15c8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-blakesmith-ar-7f9cdbbae395f22f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-blakesmith-ar-ff09d561baf8e717", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v2-0b15ec05af4a2804", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v2-b59b1d1e79d7ea11", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v4-70cd0b1898788493", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v4-94526eb1baaee54e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v4-29e481ed8fc11a79", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bodgit-plumbing-6d6f0fe22579da8e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bodgit-plumbing-fd079dd44ff9aef7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bodgit-sevenzip-82fa7f489be20976", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bodgit-sevenzip-a0079555443c94fe", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bodgit-windows-1be77fc9d30ca125", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bodgit-windows-7a39a002e41fba22", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-buger-jsonparser-4b987807401373b5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-buger-jsonparser-7d72add1f6e297c5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-44163de5007e6449", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-172719dd1e40f17f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbles-97cfbf7b3355753f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbles-ee3bc9ebc3de1df1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbletea-0877d4ed51165bc6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbletea-4f4c9ead917998d6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-colorprofile-336b7ead245bcb11", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-colorprofile-c5918b9259778ca9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-harmonica-ef5d79e29712fc23", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-harmonica-6231599fb0a27c1d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-lipgloss-5717a8e54439ceaf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-lipgloss-ab168d64bd3af37b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-x-ansi-d16466e5c11c9c7c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-x-ansi-6552ffc18e8afe1f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-x-cellbuf-da86d400c320b7cd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-x-cellbuf-12cf473406dae1e9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-x-term-e16502c875bce6ab", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-x-term-8680b2b8c12b14e2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-clipperhouse-displaywidth-5c8b2642db8ea713", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-clipperhouse-displaywidth-5f184d5c9f496346", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-dfa0b50ab9a7e8bd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-ccb03ddcd5d95d47", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cloudflare-circl-3321c9be70fde1d7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cloudflare-circl-5469dd14292c730b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cncf-xds-go-8f94fd943c978725", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cncf-xds-go-bb6d4947b9e4a6f1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-cgroups-v3-aa9d8549cb3cc99f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-cgroups-v3-3a2f25a12ed65cd5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-9c3ce79e595a4342", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-e59a89d299e9636a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-71119c1eb15a00f5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-12df7c44943766c5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-continuity-7f1a611b3f9137b4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-continuity-09913402da2bebd2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-errdefs-9500bbb18a20f8fd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-errdefs-bed4d1bdb0281132", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-d39d8b735782a363", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-186edabe71c9ad88", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-fifo-ee7344eaf8bc6e76", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-fifo-ec32d4f3c1dd3d82", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-log-776746ff425dcb22", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-log-4e3b1ca6b33bf8f3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-platforms-2dec2875b7093ea8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-platforms-f424b0c135c58b76", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-plugin-11c9a98ed3392369", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-plugin-0a152c899dee64d6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-a569b4682e0d9975", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-01c44ce7f35117a8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-d0f76cbf0caf583d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-3c26647b5d235555", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-60f22c630e98f3bd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-c632809b2eab0c3a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dave-jennifer-be9c0054c83ff877", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dave-jennifer-d45c2a6ed6372d51", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-deitch-magic-21fe7058dddd40ea", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-deitch-magic-342f28875f321f14", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-diskfs-go-diskfs-fe9866484f84562c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-diskfs-go-diskfs-95e534d2b9953041", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-distribution-reference-5cf5bbf310c710d0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-distribution-reference-5abfaf7335d7e3ca", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-cli-bcefd6de8b76e6f7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-cli-6f07da6ba89d5570", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-docker-3b44c4726d0f371d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-docker-6fd4058463b1fd70", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-fdcd0f78d56ec20a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-9ee8f882f81cf745", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-go-connections-166704c30495edb9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-go-connections-ebdd305c229aed7a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-go-units-a9271522b4f3233c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-go-units-2e1611e917f93a59", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dsnet-compress-be3aa40eb3d00bc6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dsnet-compress-0c35e1bcc0278448", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dustin-go-humanize-8432997ae2bcf2c7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dustin-go-humanize-15e8a80a80b60385", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-elliotchance-phpserialize-dd61f858e32823a2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-elliotchance-phpserialize-0388e3fa7cbb825a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-emirpasic-gods-091896950bf83083", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-emirpasic-gods-9882f7bacdc174a6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-envoyproxy-go-control-plane-envoy-77d8e9d5a1ad9592", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-envoyproxy-go-control-plane-envoy-a8616ba298930e9f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-envoyproxy-protoc-gen-validate-08b32ee1d7cb95d6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-envoyproxy-protoc-gen-validate-50ebd3003a0dd4eb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-erikgeiser-coninput-1284b838dcd5a2b7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-erikgeiser-coninput-a328e450f99eeeba", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-facebookincubator-nvdtools-f69d28a391d9a839", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-facebookincubator-nvdtools-7449b3696de286e0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fatih-color-71360e4063543be3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fatih-color-7ebedeaf520cc1eb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-felixge-fgprof-10e51b0cf504540d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-felixge-fgprof-897949eb0b027cfe", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-208481c695126b4d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-518d951fe65e50b3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-7784241df9ad0fe0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-0b90bc9a5a5b1807", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gabriel-vasile-mimetype-32583b205e9b1eb8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gabriel-vasile-mimetype-f14faaa3e1dbf357", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-github-go-spdx-v2-004cc588d165df0b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-github-go-spdx-v2-04627d3d9421aac7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gkampitakis-ciinfo-3ecfbf738588f0de", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gkampitakis-ciinfo-c303288e26fa3dd8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gkampitakis-go-snaps-07da3958600bec9b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gkampitakis-go-snaps-859e3d70396d3bcc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-glebarez-go-sqlite-b1404a6a7e23cf96", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-glebarez-go-sqlite-2abff422cfbd2e31", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-glebarez-sqlite-68e4a808f7195d7c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-glebarez-sqlite-3bd05babb7faa2f7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-git-gcfg-9363818d11b9e55a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-git-gcfg-9e7047dc06a3a8b0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-git-go-billy-v5-ba992b50ca69d442", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-git-go-billy-v5-3bf9f6156c0fbf1c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-git-go-git-v5-9fc26012aa6c7546", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-git-go-git-v5-60d97eba3e94ba3a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-41a8099e429d2e26", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-93c6bb4d47b6a45b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-logr-1ecd2131fa62597f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-logr-8915d6e41608a2d6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-stdr-ed7921825a53d3f4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-stdr-d99b2f24b8ed3ba7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-restruct-restruct-ef53ed4c6fbe2f06", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-restruct-restruct-ab894547f3216718", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-test-deep-83b71898925befa2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-test-deep-142d187d8cd402ca", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-69e67edfc2286e18", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-ef025f2989091946", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-goccy-go-yaml-efc377de37bce13b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-goccy-go-yaml-de03f883d01ca3b8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-goccy-go-yaml-7f64f219e5750427", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gocsaf-csaf-v3-4bd9ec16e5b86a68", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gocsaf-csaf-v3-31257fde00fe839d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gogo-protobuf-bd0ec7045718a6c6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gogo-protobuf-9d2815b4087c2824", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gohugoio-hashstructure-6736c6550c52be1f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gohugoio-hashstructure-3421f160f14a663e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-golang-groupcache-bd00e3e04a73c5bc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-golang-groupcache-9ba43ef89138f46f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-cmp-473d0adb4b419c7e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-cmp-dbdeead1e743947d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-a0b833e866fd1de5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-0d3769a7c8360885", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-licensecheck-90d357fe0a30faf0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-licensecheck-8505a05a46d1b815", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-pprof-0f80dceb464406c3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-pprof-dc71604f4aa2cdf3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-s2a-go-ac7cd253b4e1753e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-s2a-go-83e4bfe2eec9c3b5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-shlex-0b060ec91a1d2de4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-shlex-5307b82659ec16f4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-uuid-89828cd946b73006", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-uuid-f6424607fde0264b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-uuid-660a1132eb0c981a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-90cdda88980ab61c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-4e20e0d091a2600a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-9629f04d1b10a6ad", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-ca67e04589c6607d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gookit-color-dd914db4ce9f5e6d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gookit-color-0d2092096a50babd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gpustack-gguf-parser-go-b14f8c1f2e55722f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gpustack-gguf-parser-go-3438527434a12ca9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hako-durafmt-7f31083339fa3e12", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hako-durafmt-f294e38ba9d824f7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-aws-sdk-go-base-v2-c2bad78f077aaf53", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-aws-sdk-go-base-v2-3ccd6c5939fbb600", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-56b7e6360dd390d7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-838e981d41a122f8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-912d0981a4a0e36c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-a26e9a05ef93c2a9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-getter-16e827aec3c060b2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-getter-ac68d1815c73bbf0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-b3d879cd60d2aaba", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-6aa0ba1322b99f59", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-86af37b79a61afc1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-3cf5222ba0aa9337", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-golang-lru-v2-fc804484ec9835b3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-golang-lru-v2-0792687989b60a42", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-1548adc7fef097b5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-4a9b49ab2a1c2f38", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-henvic-httpretty-ba82f7943cba0b8a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-henvic-httpretty-b48854afa73ed5e9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-huandu-xstrings-0634db5052d02338", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-huandu-xstrings-bca5c55326f930d7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-iancoleman-strcase-8d147435ded5ca4c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-iancoleman-strcase-6b3592ba2329da13", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-in-toto-attestation-b49317b38e020536", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-in-toto-attestation-685cf7e8830d2ed0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-inconshreveable-mousetrap-f6300927a9f6b106", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-inconshreveable-mousetrap-4961dbf7adbf98ca", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-invopop-jsonschema-03a72b1d075c72d8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-invopop-jsonschema-bb26c5b35bf87043", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jbenet-go-context-bcb720b429ff9158", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jbenet-go-context-64c893e3154f24c3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jinzhu-copier-88273d94b55e7a26", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jinzhu-copier-742f7434b7b895e0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jinzhu-inflection-7986b8830e14b933", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jinzhu-inflection-7c43b08cd568963a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jinzhu-now-257bc1d78b7317c4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jinzhu-now-70ffb4ce7823ff12", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-json-iterator-go-b71b97451ba45321", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-json-iterator-go-a2a9ed90cdb5e7e1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-kastenhq-goversion-155aa2cd49359133", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-kastenhq-goversion-83043a42b42f6e2c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-kevinburke-ssh-config-69ac9358ec67970a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-kevinburke-ssh-config-6f6f3dccfa565954", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-klauspost-compress-a1156147601ced7b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-klauspost-compress-904139e84814eed7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-klauspost-cpuid-v2-d80cd4af33eaf8e3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-klauspost-cpuid-v2-043f7e40294aa8b6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-ba8d2ab961878e02", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-7d7a97212f5aa915", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-knqyf263-go-apk-version-f73d7373428f6f31", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-knqyf263-go-apk-version-127a7942cb885de4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-knqyf263-go-deb-version-f434ce9f547600a6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-knqyf263-go-deb-version-c0b14cb096a6df1f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-kr-pretty-b76d4050a948c5b8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-kr-pretty-596dbedcdbaa87e3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-kr-text-149bb08a88b6158e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-kr-text-959f0623ba8434ee", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-lucasb-eyer-go-colorful-d229ca92394c07d7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-lucasb-eyer-go-colorful-b90a07410a5270a8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-maruel-natural-b46de64980aad7a8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-maruel-natural-aad9659cddb5d972", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-masahiro331-go-mvn-version-f03a403f7bd55267", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-masahiro331-go-mvn-version-9b9ca54608bc3cdc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-08b5338f302cc464", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-33ac523ce1a65b88", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-993ea55f7ccdb0d0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-7b531bd2b39d3f62", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-localereader-352c97afb005b940", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-localereader-7665900dafdbc80e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-6480d35d13b6feaa", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-97388b36b6b457a6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mgutz-ansi-588bd007cbd0bf70", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mgutz-ansi-cf6d167250b83896", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mholt-archives-11281137f401ad9f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mholt-archives-2b5d4e7f53cfa1d0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mikelolasagasti-xz-c913b3f0fe644db3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mikelolasagasti-xz-a46d24aed8403d91", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-minio-minlz-e8b454dfa14f9606", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-minio-minlz-47690e386e77bbf3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-a08603254284a9b5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-8353c61fc244d2bb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-go-homedir-0eaeac14455768a2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-go-homedir-ec0cc2636553efe9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-e395ab6147e93076", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-d9a0d5e4a761c6e0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-683fad220f58d434", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-3ec7a7d1906b7db3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-96770404d2af75ce", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-4798824adf3f0c97", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-locker-2be6f96afd760c9f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-locker-ceeed92adeb41d79", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-moby-api-a011d526f6a3613d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-moby-api-80bb97ee6691e197", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-moby-client-510c5701256fab0b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-moby-client-2baa2d7707160775", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-atomicwriter-23ea3fc711b67e87", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-atomicwriter-942b88e617406db1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-24f259b1002c0db3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-96ef1b4764997197", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-5ffdba78d077a51b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-3263f4ee7d0bc62c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-signal-7fbf81d1a66cbfbf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-signal-161aba58f6e8834e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-user-f7aafa6bbeddca98", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-user-0ec66a10cefc2803", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-userns-322f946a739c44e9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-userns-98a13d1d25bd81ba", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-a36fc4a176d0ee4a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-4ef0b3e8a43b68e2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-b199fcf302d10783", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-0c3d1d32aef4cc22", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-morikuni-aec-fb1bc5562878f05a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-morikuni-aec-4205bb49ac3a7a4c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-muesli-ansi-bf26c8fc89989d9d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-muesli-ansi-a0cb089e18185ff6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-muesli-cancelreader-952b970833d2dae7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-muesli-cancelreader-ed17cffa2ebc0d15", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-muesli-termenv-eda57fee892a5a88", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-muesli-termenv-ad3bdda0acac034d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-ncruces-go-strftime-1144b4da6fcfdc60", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-ncruces-go-strftime-8dded9db9bf04e66", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-nix-community-go-nix-f72ee684f3cac869", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-nix-community-go-nix-4a26384751caf982", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-nwaples-rardecode-v2-61ed5aa217767dd4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-nwaples-rardecode-v2-38844de138a359c6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-olekukonko-cat-bebcd8c7e0abbf91", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-olekukonko-cat-4d94768862b88c20", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-olekukonko-errors-b37731489e65ea4f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-olekukonko-errors-bf4c93150e139994", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-olekukonko-ll-9eebc3ddf477ca22", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-olekukonko-ll-4262d68bf7255e4d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-olekukonko-tablewriter-347c44c904ba4a4c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-olekukonko-tablewriter-e97fed8e76826d40", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-19989b5d142f3073", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-04bc2386a5aa4c80", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-10613df95c6a2b3e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-305848e01f1fb7d4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-f19e239bf624ade5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-7f7618e5b9c335d1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-openvex-go-vex-e70fd5510c27983b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-openvex-go-vex-376bf4281f4f03cf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-owenrumney-go-sarif-9dc42c14c6ffb775", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-owenrumney-go-sarif-1c9dfdacb0894035", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-package-url-packageurl-go-90da91c7744b3bd4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-package-url-packageurl-go-bc4e0ee26b6000bf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pandatix-go-cvss-f0e242900b28999e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pandatix-go-cvss-036506eb5c70fd8b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pb33f-ordered-map-v2-a5d4470f38247c26", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pb33f-ordered-map-v2-373484fc5c20815e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pborman-indent-bd70889000a4b095", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pborman-indent-524c97205bf0dd4a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-f1f26610dff6c5b1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-d0186ce91c94c19b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-d91b6d6201c35c75", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-32e021a358ae7940", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-5ad1218512f08dac", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-f3352de1ba7ae8d0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-piprate-json-gold-10cef35a20554e69", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-piprate-json-gold-33a0c1b072b89937", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pjbgf-sha1cd-9e41dfa71d0745e8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pjbgf-sha1cd-979f54ed2119ffe6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-errors-2f2b4a7ce7872628", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-errors-1c0b2d9b80d28584", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-profile-ba1a14fd8b7b2f72", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-profile-408e2170d5c0aa6d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-xattr-6223a1a56b452ce1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-xattr-89a3cbecc17d0e75", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-63efd6ebb5d1e9e9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-5c9326c6ce9315fe", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pquerna-cachecontrol-49504ad6cb36edba", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pquerna-cachecontrol-7446895663010f14", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-remyoudompheng-bigfft-82caff8370081f6f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-remyoudompheng-bigfft-b1ee59cbc8bb1a32", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-rivo-uniseg-2c0de3c260aa0d91", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-rivo-uniseg-b8c0bf8d033d75ba", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-rogpeppe-go-internal-a7723e2c1ea652b3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-rogpeppe-go-internal-e2dcf5ec58de86c5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-rust-secure-code-go-rustaudit-5e103b6f10fbeebc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-rust-secure-code-go-rustaudit-4c8c544e4828b6a0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-ddd1e2da24a21af5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-63ff3cc2eea97f28", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-saintfish-chardet-cf5ea227de9a83a7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-saintfish-chardet-95e74062d1eb7935", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-santhosh-tekuri-jsonschema-v6-c20b008a43f442ea", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-santhosh-tekuri-jsonschema-v6-b26018fb0634b0f4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sassoftware-go-rpmutils-cc1a1dbe4057c7de", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sassoftware-go-rpmutils-0041fe15cccf8933", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-scylladb-go-set-580d79f1c5557fa8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-scylladb-go-set-02080dbc1ccef012", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sergi-go-diff-eadb73b749fc4f5b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sergi-go-diff-0c00c18d8ae68f91", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-shopspring-decimal-19af8ea56a342c55", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-shopspring-decimal-f42618a2365f1ee2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-f9cb0ed57e859e4c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-79be6d7b25fd4626", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-skeema-knownhosts-baf110c890c63110", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-skeema-knownhosts-f81b956f509e840a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-smallnest-ringbuffer-f932a811bf394968", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-smallnest-ringbuffer-511ce693d405a06f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sorairolake-lzip-go-2a3dfa41f8cc9375", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sorairolake-lzip-go-a97581a03c6becaf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sourcegraph-conc-cfbd747de78458fc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sourcegraph-conc-4019ec68de2ee981", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spdx-gordf-77b6a97fae96f2c5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spdx-gordf-fa860ad9fec9e692", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spdx-tools-golang-33492ce84f5deee3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spdx-tools-golang-6333ded3cfe1ec0d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-afero-577ab40ea4ceaedf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-afero-48b5ac7707000756", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-cast-b759ce340b0f2e0e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-cast-0c8e9ee8e493ef91", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-cobra-aaf4307e8bf5eb4c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-cobra-15cfaf534d13d551", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-pflag-ec9ed93888749dc0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-pflag-b7d4f247b89d48d9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-viper-53bb8bba12e970aa", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-viper-dc1a2c757928829f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spiffe-go-spiffe-v2-19c7011cfc5a1b62", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spiffe-go-spiffe-v2-aae517762df2df52", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-stretchr-objx-1466a8a1e6db071b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-stretchr-objx-105c5fecde627a25", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-stretchr-testify-d64a25dace8d069c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-stretchr-testify-8a8e274d66d54652", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-subosito-gotenv-2db166198c302bc1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-subosito-gotenv-2ad2d37143330616", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-70fa100f612ace84", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-f1d75774f395139a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sylabs-squashfs-f8ed6624f5d17237", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sylabs-squashfs-2acb894b326cc89c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tailscale-hujson-ffc85ce01e80d1df", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tailscale-hujson-33cf017cdc0d6243", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-therootcompany-xz-532453fd4b43c144", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-therootcompany-xz-c2dc462e8d76e9d3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tidwall-gjson-04338fb47390afd1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tidwall-gjson-0a8c0e60df52a781", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tidwall-match-f03a8ca224ae40da", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tidwall-match-173a47710c98e917", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tidwall-pretty-fdfa75cc6c742ae7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tidwall-pretty-de9ffa8e8830e8c4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tidwall-sjson-49ec4e4ca8468b25", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tidwall-sjson-35598b98347a05f7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-dddc558a2e41841e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-b01107ac095a2922", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-umisama-go-cpe-77f1e0e18a85a53f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-umisama-go-cpe-34cb07b51035c992", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vbatts-go-mtree-98d17fd6f931f523", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vbatts-go-mtree-a97e83346825d999", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vifraa-gopom-89cfb173efbe9d44", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vifraa-gopom-0db3d570911de48c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-wagoodman-go-partybus-688cb61f27aac558", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-wagoodman-go-partybus-ca295408c72c3589", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-wagoodman-go-presenter-f690f436003173ad", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-wagoodman-go-presenter-647419a50734dd7f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-wagoodman-go-progress-c5dd24b2be916e24", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-wagoodman-go-progress-1e0b68bacaba481c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-xanzy-ssh-agent-a40a80bb17249690", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-xanzy-ssh-agent-ac773c6b2614e9e1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-xi2-xz-5aff0dfb6bddc19f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-xi2-xz-eef9653d73903952", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-xo-terminfo-470cccbaad5c75a4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-xo-terminfo-5d31e9a19340722b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-43dd7739aa469207", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-fe6325d9f26829a3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-zyedidia-generic-2e1d3ced20587b7f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-zyedidia-generic-8f85bec2897890c7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-github-codeql-action-upload-sarif-b2cc4e751bdbff23", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.etcd.io-bbolt-e4d5a1182416541f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.etcd.io-bbolt-f60ad984415904f5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opencensus.io-1b1445bd5d28512a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opencensus.io-89c940803c2a6293", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-a00544d9cf935bfa", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-b85cbf72c4d015b1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-detectors-gcp-3dbe8fb028253bc2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-detectors-gcp-751a1e252825ce64", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-e62b43fb06a0ac34", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-54e8f7218aa059c0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-5cd65f4253c81a65", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-12ca537122616aed", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-458f9251810739a4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-a58f1e964cc00109", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-35f7f9ed1665e42b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-957f5515924b3e23", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-182b6051dc7fda66", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-5f4c52f8605b42db", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-6c6a1785787b5a4d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-da1c8a91f8418476", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-9903b7930f5fcede", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-d9cda6fdda56a8b2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-4fc93c87aeebc64b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-1569d256c4eba32a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.yaml.in-yaml-v4-82de4183b05be72f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.yaml.in-yaml-v4-28316b09700feba5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go4.org-9af3b7878e4b5c1f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go4.org-496e597a7e464f67", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-crypto-68d3b962d07abc2f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-crypto-e514dcf469e6310b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-exp-4fe995c7f92fafc3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-exp-3f5af6d1997471c6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-mod-e2292a330881cf62", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-mod-56d232e7120c3a8b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-mod-4a27469cc352a0fc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-net-5b92054f073affe6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-net-e01312e499e41c80", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-net-f556606ebb1221ee", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-net-fd71c35e086458fc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-oauth2-78c10eb5d81f36d3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-oauth2-59074934b0cd2f37", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sync-1e9b8c91e22e88f0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sync-11295fd5db771a70", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sys-1ac0c60afa1089df", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sys-009b0ba8c25f5f40", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sys-8792dfeacf365a8a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-term-cd7992b205dbcbfe", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-term-b9d932bf025cdc58", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-text-9a81c488f3ad8d93", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-text-a3883bc5333631e4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-text-2cb9597aaebee04b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-time-90e57fc7c651498e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-time-d71278c90eda02b0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-tools-1d0c1f0fc356ce03", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-tools-bb0af48b1df4021b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-xerrors-056fc8b658138e7a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-xerrors-7a5c4b13633fe5f4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-gonum.org-v1-gonum-f553e50691c64718", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-gonum.org-v1-gonum-dbda39230178b89b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-api-0f1f223a702c8b97", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-api-4f4ed3d8cb92c940", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-64224fe56b48ea1d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-1049b3a34d385509", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-d6e204d5b39cc3d9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-a89e3751f7ab60f1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-1c231c21367d6661", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-ba216fed2a0d570f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-grpc-73ac7fbf7679b398", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-grpc-9f66238c5f4411e5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-protobuf-0055873c0ce1a39b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-protobuf-50226e5d4bbd723b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-gopkg.in-warnings.v0-8ac617c9f7dfb7cd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-gopkg.in-warnings.v0-ad01776c7dce5d1f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-716c668b92999095", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-7837bc368c6abc6d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-gorm.io-gorm-4c458b1192ddedc0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-gorm.io-gorm-d0a76ddfbc00d7a3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-hackage-hasql-dynamic-statements-00ca9334cc8d0a40", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-hackage-hasql-implicits-e0da11562366ca35", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-hackage-hasql-pool-ef7938fbe654b672", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-howett.net-plist-a367099a7cb19630", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-howett.net-plist-611dfc0e7c7a7dcb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-hackage-hspec-8dec45f676526a18", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-hackage-hspec-core-44ae212da2d95c23", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-hackage-hspec-discover-5d0fbe70c542ce4b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-binary-jdk-3cf5330955a84ab1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-java-archive-joda-time-eaa4d4b3bd89d483", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-apk-ko-03a50c942696e292", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-hackage-language-docker-b051fe983f986608", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-hackage-lens-aeson-0c216abd2ca65e69", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-apk-libvncserver-5b91062e766611f9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-modernc.org-libc-7c2e7d67ac7410ce", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-modernc.org-libc-9055c56cfa7635bd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-modernc.org-mathutil-610e3c135e640d33", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-modernc.org-mathutil-c1298f2812899ed6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-modernc.org-memory-a7fc43f05c222875", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-modernc.org-memory-0c296ab1a5739a3c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-modernc.org-sqlite-372f331b53d7b47f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-modernc.org-sqlite-6db33cdca5cac74f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-apk-npm-apk-subpackage-with-false-positive-ac599a0cbbf682cd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-hackage-optparse-applicative-cab0662d28cc5acc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-ossf-scorecard-action-86495b7307b61fb5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-hex-plug-f6db7fde905faa24", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-hackage-protolude-f491d96080c8bcef", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-hackage-ptr-8dea2c4dce05107d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-python-pygments-8df22a295e7d036c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-gem-rails-0bffe6003cf32471", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-sigstore-cosign-installer-cc1df9a3429cbc80", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-hackage-spdx-449fc4c88dd8be98", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-hackage-stm-dd2962ef63785317", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-python-tabulate-3e262514354ce16d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-python-yardstick-6061edcbf25c040d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-zizmorcore-zizmor-action-2a3b7b188c16f824", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.src"}, {"spdxElementId": "SPDXRef-Package-rpm-grype-173f2ac4637b951e", "relatedSpdxElement": "SPDXRef-File-...grype-0.119.0-0.2.hum1.aarch64.debug-37090b8069b66983", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-debuginfo-0.119.0-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-rpm-grype-173f2ac4637b951e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-grype-debuginfo-0.119.0-0.2.hum1.aarch64", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-aarch64-grype-debuginfo", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-grype-debuginfo-0.119.0-0.2.hum1.aarch64"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-grype-debugsource-0.119.0-0.2.hum1.aarch64", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-aarch64-grype-debugsource", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-grype-debugsource-0.119.0-0.2.hum1.aarch64"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-lipgloss-0033c3f04e070aef", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-getter-0114dbe1beb69223", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-02f72eb5c32daaf6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spiffe-go-spiffe-v2-03c68604f57b4741", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-0523a0460ca488e7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-libc-06527532817d672e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-feature-ec2-imds-07ee7ac8d6398a86", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-presigned-url-08ac5b71dad8bc0c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mgutz-ansi-0920edf93afa5844", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-0b7986138a195082", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-emirpasic-gods-0db0d1c958bd8ca2", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-0e12a32f0026cb84", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cloudflare-circl-0e9dc29c10c22c09", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-log-0edc98826656b188", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-0efada52533c3099", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-viper-0f37bfc7b2d96566", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-golang-lru-v2-0f672f8f774746b2", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-masahiro331-go-mvn-version-10529021c13e90a0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-107fbe88aac1270d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-123baded69448bf0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-s3-15c6fdf382323ef3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-1e21e65642531c72", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-ssooidc-1f2abd7df6bc4e06", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-1f3c8d88a0047d8f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-sqlite-205b992849f4483a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-s3shared-20d77e6d4ffc4c03", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-connections-20f80b36500118ad", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-20fe82145f89ff3e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gocsaf-csaf-v3-217662299146216c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-21807e717ffd2b14", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-santhosh-tekuri-jsonschema-v6-2238944e2a6be877", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-233157a6dc0b989f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-blakesmith-ar-233a3a1db7514868", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-241973ec95f399a0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-restruct-restruct-2564a4f65057068e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-signin-262380d7d6bdad2e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-OneOfOne-xxhash-268c1393e1d83864", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-huandu-xstrings-2757d0137f8f3120", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-shopspring-decimal-290cd270c04c031c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-cli-2940e9f8bc98a455", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-github-go-spdx-v2-2a26b3e36c20e162", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-knqyf263-go-deb-version-2b6ebcdc95c3e889", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-2c5075e93967a01c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-glebarez-go-sqlite-2f4c20e1963adc7d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Intevation-jsonpath-2f65285022a20c22", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-bubbly-30320a28b355d7ac", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-acobaugh-osrelease-30a5db8da0ff56a6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-318c5f17aafb0c35", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-32b8daf3599a6d08", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-api-32f153af8d3eec0b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pjbgf-sha1cd-33ee9fa15c85467a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-342ae09cb029fd51", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-3542e5b177dc1174", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pborman-indent-36075ba7843ffa88", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jbenet-go-context-367dfb65da7dde90", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-harmonica-36c4b0ba9a28945b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-376e8db55aa8303b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-s2a-go-388c921bac03d721", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-rpmdb-39f192dfda34c98c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-go-homedir-3c0b5fbaf936edee", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sso-3c2f916221eafa4d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-subosito-gotenv-3cda5ee5250cabee", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-henvic-httpretty-3dcb72895bacb234", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-3ebc4c0c63921ca8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-3f2625e2585567c0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-aws-protocol-eventstream-3ff67073b2112feb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-40b1f287cd57a5c7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-4215e393881dda04", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-4235cfcfd78e5b24", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-429f93f83be135dd", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-collections-437dcbd7406868fc", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-43ef29c658c306bd", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-exporter-metric-4404509dfe209dc7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-44156b24e7680a21", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-smithy-go-4442bf8918f47ef1", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-DataDog-zstd-45f62db135a90027", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-config-464f7852e61af8f5", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-internal-resourcemapping-467f7305ea4aa564", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jinzhu-now-4e11d6dcf148f1c5", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-facebookincubator-nvdtools-4e581d0780b65cf8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-git-gcfg-4fcf321caaa7171f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-4fde74ccf0d4998c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-api-5204d657c6fa23cb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-rust-secure-code-go-rustaudit-5211330e6a0a7ddc", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gookit-color-523d4334c319f84c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-52846ed3b72b970d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-529747e4d6102b32", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-knqyf263-go-apk-version-54e2ae76ad3f158e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-detectors-gcp-55c43c793aa25633", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbletea-55cfdf15bb977f37", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-560c186d7f368c2b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-elliotchance-phpserialize-58dfb0d55aecbee3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-araddon-dateparse-5ab060d70c5c231c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-signal-5cda820b30905462", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-exp-5f5a8b89eb1e2e4a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-in-toto-attestation-603be52049552c98", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-60e80e1b9e85325b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-displaywidth-6214fe511830b901", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-version-629d983eae734de2", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-warnings.v0-62dc26b49c827903", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-62f38c3ca70a22bf", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pquerna-cachecontrol-645cbe4288301f73", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aquasecurity-go-pep440-version-652c6488eaa1fc38", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cel.dev-expr-66459580bf7a7e04", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-66c4de9fe7df7c50", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-term-6b724b4554d57b93", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kevinburke-ssh-config-6d6846cac292b744", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Intevation-gval-6dff92b7e5be3013", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-deitch-magic-6e619bc099d48271", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-tablewriter-6e7d3e060383c38f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gogo-protobuf-6ea233073fd787cc", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-6f148ad76a49d8ef", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-lucasb-eyer-go-colorful-701de8a04f672eb0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-homedir-7131c931cb44f99e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-71573abbc1ef03eb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-7178bc1c99ba455f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-73865f4d359fe7ed", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-package-url-packageurl-go-73f43f2f13b55a04", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aymanbagabas-go-osc52-v2-7530bb1e5a81566e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jinzhu-copier-7647ab69f990ae85", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-stdlib-765c93b72a178fff", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-dustin-go-humanize-76654d868f765bc7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-storage-76c0a18b76e9137b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spdx-tools-golang-7857925cb400e0d0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-7897af7eff391110", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-clio-79025f8f682dd2ae", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-packageurl-go-7967a2607dacb794", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-iancoleman-strcase-79f34bf20e302fa8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-7a19ee88cdf80c8c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-7aa77e66581b858e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-7babc8fffd6a066d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-7d99329c26b5c44e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-dario.cat-mergo-7deae5420e1b47ee", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-7e176c7d27f1ffcc", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-scylladb-go-set-7e977b8d9181af46", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-7f112aee95e2ecb5", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.etcd.io-bbolt-7fbeb7171aa8a76d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fatih-color-7feb4a635cba59f3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v2-80d921310727b332", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-80e4443835858b9d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-muesli-ansi-830a7faa4aa432fb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-83c14885dace4635", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-muesli-cancelreader-83da796cfea83aca", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-x-cellbuf-85e76e4363874688", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-xanzy-ssh-agent-865acd2a6c43d907", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-user-886d21bd75e881b2", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-configsources-8902dcc71c8471b1", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-8a6d77ef14940fd0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-credentials-8c5ee7ff20b7d496", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-8daf85f07d1f9bd4", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vifraa-gopom-90ccd904c2408318", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-units-913e78da6bbc1250", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-91fd075daa6db87d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sourcegraph-conc-9257804278d56b66", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-minio-minlz-93263cefa03934ed", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-becheran-wildmatch-go-936f65df86b9d841", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-continuity-9373639ad05405cb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-platforms-93b62a2ab7e859df", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bodgit-sevenzip-93f0e50a80b91215", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-fgprof-95dfcb59e676c4cc", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-pprof-95e78ee30268b524", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-96f30eed3dcf47d6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-ll-976b0d2881d1ca97", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-979c3c1582da233b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aquasecurity-go-version-981bd9d8519fadcc", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-colorprofile-9850cc3bd47db4ff", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-envoyproxy-protoc-gen-validate-98aa640d31f6717e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-xo-terminfo-9a89e52a7e14d868", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-afero-9c6b6cdd51c4784e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-glebarez-sqlite-9cde7301346af6d6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hako-durafmt-9d5b1c25f93d3a84", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-tools-9dfc76e848e5458c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-logger-9f48985cf195bec4", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-saintfish-chardet-9fbb3f4db7a935a1", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-compress-a04b227c79d591b5", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-a122363e32d429b7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-howett.net-plist-a12bd6a3cfcd37f9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-xi2-xz-a2bdb18bf5d0e288", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-a30e321677d3fd85", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-a3a35df68b4ad7fb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-a523354ed056bb5c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-aws-sdk-go-base-v2-a6658289be6d149b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v4-a6cff570e02e0077", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-time-a8924caf483787b8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bodgit-plumbing-a8c64b07bd880952", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-a947ed0b63ec6067", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-rivo-uniseg-ab5a832b97aee5be", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-ac78ba7c2e106c55", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cncf-xds-go-ac7c52b884135991", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-licensecheck-ad5dc018457a8915", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jinzhu-inflection-adf8344b986f214d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kastenhq-goversion-ae521c778a1debfa", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sylabs-squashfs-ae5c2086bd91b11b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-STARRY-S-zip-aed46e25538b7606", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-envoyproxy-go-control-plane-envoy-b086475a7700b6fd", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bitnami-go-version-b099749efd929a31", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-openvex-go-vex-b20fbf004b07e8d2", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-b228c33bafd8a571", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-fifo-b27f86aaf92f1c6d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-b2bc836f9bcb390d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mikelolasagasti-xz-b2db22f7a73dc8c3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-nix-community-go-nix-b2fa38e2a17816eb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-macholibre-b396092ea43b5373", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-fangs-b4abd7cadb17e8ba", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-b4b3e3b6bbeb38a4", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-checksum-b560f26fed3fc8f9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-skeema-knownhosts-b571e7b7b5403b89", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sergi-go-diff-b5c5dc83557bdda9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-monitoring-b6e32202d8793812", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-b7a48a71952e46e2", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bgentry-go-netrc-b88c6679fc34e461", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-b8b9e3d458661ae5", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-gorm.io-gorm-b91d65a304d35f59", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-remyoudompheng-bigfft-b9b6305b2aded0ec", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gabriel-vasile-mimetype-ba707fa8ab81bbb6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-ba7789f8e63b103c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbles-ba8b0f51b2044a99", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sorairolake-lzip-go-baddd917eff58f76", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spdx-gordf-bc640265fcc4acc5", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-cmp-bd8f7c7d9ba26ba1", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-bef3e0743281d3f6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-oauth2-c024415239ef086b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-c0987934af1dede5", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-cat-c0dfb98af08588f6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-c0fae8d9173f6f8d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-client-c2a98f8372d21854", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-xerrors-c33e64efc6c2dc66", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-errors-c5d2d53cb0eb4360", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-andybalholm-brotli-c810bc1c88e06120", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-piprate-json-gold-c9490b0aa636ba8f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-c9af4ce3fdd649cf", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-smallnest-ringbuffer-ca40aa2c7b5f6da4", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-git-go-git-v5-cb7be3d9e525bd44", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-wagoodman-go-progress-ce78c6f0325a9ca8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sassoftware-go-rpmutils-ceec0eaa75c074b5", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gohugoio-hashstructure-d0ab6c7c1e979ff7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-d0adf17e3b3e20b7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-distribution-reference-d115cd569f1476a6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-d1315c1ed6472c98", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-mod-d1b278826d6b8b11", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-owenrumney-go-sarif-d1f5bd5b7286bb87", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-nwaples-rardecode-v2-d4d6c0de5c012f4e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-sync-d6e4d0bdd2979199", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-d842b7c69cf11184", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-CycloneDX-cyclonedx-go-d959068b8fc63e2e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-dae48cfe6416f229", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-db0384e876064a63", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-zyedidia-generic-dcf5ca6371b407c0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-ddd26704e01faf36", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-errors-de0976b78aa42f83", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-diskfs-go-diskfs-de62268a6b8c32b2", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-therootcompany-xz-dea12b3bbd27596b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-accept-encoding-dea2b9aa54559e88", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-stereoscope-def7ba1477147e3b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-adrg-xdg-e0891862c4cac5c8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-e15e95e42851d307", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sts-e17d116f1cf3ec26", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-e19038fc7a2b5d5e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-locker-e198aa2c026bb124", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-syft-e23a7872bb863241", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-goccy-go-yaml-e274fe478c1781d0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-endpoints-v2-e38c26f21d58c139", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gpustack-gguf-parser-go-e52630e092fbf180", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pandatix-go-cvss-e535655f18a0daf3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-e652a5c32fec0aea", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-e725f5d713e63e52", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-x-term-e7eee4c6245c1233", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-e93f6e072d3eb108", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go4.org-ea62044ab737b10f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-lzo-ea6ddc3fd7b3d982", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-iam-ea6e46a2627f6639", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-struct-converter-eba295ed97445f65", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-wagoodman-go-presenter-ec87d7c3c24877e6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cast-ecdb441b7a6a5574", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-muesli-termenv-ede4acf0f5336f48", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbatts-go-mtree-ee622f7616eb79e1", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-agext-levenshtein-ee8eaef48d79c008", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-memory-eeaed50a1393dcbd", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bodgit-windows-ef5ac3e091576971", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-wagoodman-go-partybus-f0fc2150eea547a1", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-v4a-f3305bdd9b3db3eb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-plugin-f42370aaaa9fb186", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-profile-f476746390bae2a1", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-userns-f4b65e737d877d28", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-json-iterator-go-fa06175dc23ac437", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-dsnet-compress-fae06b0d6f5dc64c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-fb964e8164e696bd", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-detectors-gcp-fc5e355d4bbe3248", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-fc60af9e2071027f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-mathutil-fc9ea68bba38fa6f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-golang-groupcache-fcaafcc5bbb94cad", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-x-ansi-fcdfb91c59e5703a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mholt-archives-fd1638e7958a61c3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-fd18afd155427906", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-xattr-fda4ce011c4a67f3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-git-go-billy-v5-ffc8a700d518bd7f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tailscale-hujson-ffd87a9c5e557fbc", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-lipgloss-0033c3f04e070aef", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-getter-0114dbe1beb69223", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-02f72eb5c32daaf6", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spiffe-go-spiffe-v2-03c68604f57b4741", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-0523a0460ca488e7", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-libc-06527532817d672e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-feature-ec2-imds-07ee7ac8d6398a86", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-presigned-url-08ac5b71dad8bc0c", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mgutz-ansi-0920edf93afa5844", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-0b7986138a195082", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-emirpasic-gods-0db0d1c958bd8ca2", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-0e12a32f0026cb84", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cloudflare-circl-0e9dc29c10c22c09", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-log-0edc98826656b188", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-0efada52533c3099", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-viper-0f37bfc7b2d96566", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-golang-lru-v2-0f672f8f774746b2", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-masahiro331-go-mvn-version-10529021c13e90a0", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-107fbe88aac1270d", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-123baded69448bf0", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-s3-15c6fdf382323ef3", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-1e21e65642531c72", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-ssooidc-1f2abd7df6bc4e06", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-1f3c8d88a0047d8f", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-sqlite-205b992849f4483a", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-s3shared-20d77e6d4ffc4c03", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-connections-20f80b36500118ad", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-20fe82145f89ff3e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gocsaf-csaf-v3-217662299146216c", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-21807e717ffd2b14", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-santhosh-tekuri-jsonschema-v6-2238944e2a6be877", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-233157a6dc0b989f", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-blakesmith-ar-233a3a1db7514868", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-241973ec95f399a0", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-restruct-restruct-2564a4f65057068e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-signin-262380d7d6bdad2e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-OneOfOne-xxhash-268c1393e1d83864", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-huandu-xstrings-2757d0137f8f3120", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-shopspring-decimal-290cd270c04c031c", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-cli-2940e9f8bc98a455", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-github-go-spdx-v2-2a26b3e36c20e162", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-knqyf263-go-deb-version-2b6ebcdc95c3e889", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-2c5075e93967a01c", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-glebarez-go-sqlite-2f4c20e1963adc7d", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Intevation-jsonpath-2f65285022a20c22", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-bubbly-30320a28b355d7ac", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-acobaugh-osrelease-30a5db8da0ff56a6", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-318c5f17aafb0c35", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-32b8daf3599a6d08", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-api-32f153af8d3eec0b", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pjbgf-sha1cd-33ee9fa15c85467a", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-342ae09cb029fd51", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-3542e5b177dc1174", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pborman-indent-36075ba7843ffa88", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jbenet-go-context-367dfb65da7dde90", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-harmonica-36c4b0ba9a28945b", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-376e8db55aa8303b", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-s2a-go-388c921bac03d721", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-rpmdb-39f192dfda34c98c", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-go-homedir-3c0b5fbaf936edee", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sso-3c2f916221eafa4d", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-subosito-gotenv-3cda5ee5250cabee", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-henvic-httpretty-3dcb72895bacb234", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-3ebc4c0c63921ca8", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-3f2625e2585567c0", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-aws-protocol-eventstream-3ff67073b2112feb", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-40b1f287cd57a5c7", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-4215e393881dda04", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-4235cfcfd78e5b24", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-429f93f83be135dd", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-collections-437dcbd7406868fc", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-43ef29c658c306bd", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-exporter-metric-4404509dfe209dc7", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-44156b24e7680a21", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-smithy-go-4442bf8918f47ef1", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-DataDog-zstd-45f62db135a90027", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-config-464f7852e61af8f5", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-internal-resourcemapping-467f7305ea4aa564", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jinzhu-now-4e11d6dcf148f1c5", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-facebookincubator-nvdtools-4e581d0780b65cf8", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-git-gcfg-4fcf321caaa7171f", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-4fde74ccf0d4998c", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-api-5204d657c6fa23cb", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-rust-secure-code-go-rustaudit-5211330e6a0a7ddc", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gookit-color-523d4334c319f84c", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-52846ed3b72b970d", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-529747e4d6102b32", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-knqyf263-go-apk-version-54e2ae76ad3f158e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-detectors-gcp-55c43c793aa25633", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbletea-55cfdf15bb977f37", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-560c186d7f368c2b", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-elliotchance-phpserialize-58dfb0d55aecbee3", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-araddon-dateparse-5ab060d70c5c231c", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-signal-5cda820b30905462", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-exp-5f5a8b89eb1e2e4a", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-in-toto-attestation-603be52049552c98", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-60e80e1b9e85325b", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-displaywidth-6214fe511830b901", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-version-629d983eae734de2", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-warnings.v0-62dc26b49c827903", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-62f38c3ca70a22bf", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pquerna-cachecontrol-645cbe4288301f73", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aquasecurity-go-pep440-version-652c6488eaa1fc38", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cel.dev-expr-66459580bf7a7e04", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-66c4de9fe7df7c50", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-term-6b724b4554d57b93", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kevinburke-ssh-config-6d6846cac292b744", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Intevation-gval-6dff92b7e5be3013", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-deitch-magic-6e619bc099d48271", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-tablewriter-6e7d3e060383c38f", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gogo-protobuf-6ea233073fd787cc", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-6f148ad76a49d8ef", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-lucasb-eyer-go-colorful-701de8a04f672eb0", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-homedir-7131c931cb44f99e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-71573abbc1ef03eb", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-7178bc1c99ba455f", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-73865f4d359fe7ed", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-package-url-packageurl-go-73f43f2f13b55a04", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aymanbagabas-go-osc52-v2-7530bb1e5a81566e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jinzhu-copier-7647ab69f990ae85", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-stdlib-765c93b72a178fff", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-dustin-go-humanize-76654d868f765bc7", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-storage-76c0a18b76e9137b", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spdx-tools-golang-7857925cb400e0d0", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-7897af7eff391110", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-clio-79025f8f682dd2ae", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-packageurl-go-7967a2607dacb794", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-iancoleman-strcase-79f34bf20e302fa8", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-7a19ee88cdf80c8c", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-7aa77e66581b858e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-7babc8fffd6a066d", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-7d99329c26b5c44e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-dario.cat-mergo-7deae5420e1b47ee", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-7e176c7d27f1ffcc", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-scylladb-go-set-7e977b8d9181af46", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-7f112aee95e2ecb5", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.etcd.io-bbolt-7fbeb7171aa8a76d", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fatih-color-7feb4a635cba59f3", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v2-80d921310727b332", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-80e4443835858b9d", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-muesli-ansi-830a7faa4aa432fb", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-83c14885dace4635", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-muesli-cancelreader-83da796cfea83aca", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-x-cellbuf-85e76e4363874688", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-xanzy-ssh-agent-865acd2a6c43d907", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-user-886d21bd75e881b2", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-configsources-8902dcc71c8471b1", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-8a6d77ef14940fd0", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-credentials-8c5ee7ff20b7d496", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-8daf85f07d1f9bd4", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vifraa-gopom-90ccd904c2408318", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-units-913e78da6bbc1250", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-91fd075daa6db87d", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sourcegraph-conc-9257804278d56b66", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-minio-minlz-93263cefa03934ed", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-becheran-wildmatch-go-936f65df86b9d841", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-continuity-9373639ad05405cb", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-platforms-93b62a2ab7e859df", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bodgit-sevenzip-93f0e50a80b91215", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-fgprof-95dfcb59e676c4cc", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-pprof-95e78ee30268b524", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-96f30eed3dcf47d6", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-ll-976b0d2881d1ca97", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-979c3c1582da233b", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aquasecurity-go-version-981bd9d8519fadcc", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-colorprofile-9850cc3bd47db4ff", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-envoyproxy-protoc-gen-validate-98aa640d31f6717e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-xo-terminfo-9a89e52a7e14d868", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-afero-9c6b6cdd51c4784e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-glebarez-sqlite-9cde7301346af6d6", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hako-durafmt-9d5b1c25f93d3a84", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-tools-9dfc76e848e5458c", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-logger-9f48985cf195bec4", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-saintfish-chardet-9fbb3f4db7a935a1", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-compress-a04b227c79d591b5", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-a122363e32d429b7", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-howett.net-plist-a12bd6a3cfcd37f9", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-xi2-xz-a2bdb18bf5d0e288", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-a30e321677d3fd85", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-a3a35df68b4ad7fb", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-a523354ed056bb5c", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-aws-sdk-go-base-v2-a6658289be6d149b", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v4-a6cff570e02e0077", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-time-a8924caf483787b8", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bodgit-plumbing-a8c64b07bd880952", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-a947ed0b63ec6067", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-rivo-uniseg-ab5a832b97aee5be", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-ac78ba7c2e106c55", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cncf-xds-go-ac7c52b884135991", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-licensecheck-ad5dc018457a8915", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jinzhu-inflection-adf8344b986f214d", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kastenhq-goversion-ae521c778a1debfa", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sylabs-squashfs-ae5c2086bd91b11b", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-STARRY-S-zip-aed46e25538b7606", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-envoyproxy-go-control-plane-envoy-b086475a7700b6fd", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bitnami-go-version-b099749efd929a31", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-openvex-go-vex-b20fbf004b07e8d2", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-b228c33bafd8a571", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-fifo-b27f86aaf92f1c6d", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-b2bc836f9bcb390d", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mikelolasagasti-xz-b2db22f7a73dc8c3", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-nix-community-go-nix-b2fa38e2a17816eb", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-macholibre-b396092ea43b5373", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-fangs-b4abd7cadb17e8ba", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-b4b3e3b6bbeb38a4", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-checksum-b560f26fed3fc8f9", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-skeema-knownhosts-b571e7b7b5403b89", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sergi-go-diff-b5c5dc83557bdda9", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-monitoring-b6e32202d8793812", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-b7a48a71952e46e2", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bgentry-go-netrc-b88c6679fc34e461", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-b8b9e3d458661ae5", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-rpm-grype-b91008818cbc1820", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-gorm.io-gorm-b91d65a304d35f59", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-remyoudompheng-bigfft-b9b6305b2aded0ec", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gabriel-vasile-mimetype-ba707fa8ab81bbb6", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-ba7789f8e63b103c", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbles-ba8b0f51b2044a99", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sorairolake-lzip-go-baddd917eff58f76", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spdx-gordf-bc640265fcc4acc5", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-cmp-bd8f7c7d9ba26ba1", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-bef3e0743281d3f6", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-oauth2-c024415239ef086b", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-c0987934af1dede5", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-cat-c0dfb98af08588f6", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-c0fae8d9173f6f8d", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-client-c2a98f8372d21854", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-xerrors-c33e64efc6c2dc66", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-errors-c5d2d53cb0eb4360", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-andybalholm-brotli-c810bc1c88e06120", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-piprate-json-gold-c9490b0aa636ba8f", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-c9af4ce3fdd649cf", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-smallnest-ringbuffer-ca40aa2c7b5f6da4", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-git-go-git-v5-cb7be3d9e525bd44", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-wagoodman-go-progress-ce78c6f0325a9ca8", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sassoftware-go-rpmutils-ceec0eaa75c074b5", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gohugoio-hashstructure-d0ab6c7c1e979ff7", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-d0adf17e3b3e20b7", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-distribution-reference-d115cd569f1476a6", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-d1315c1ed6472c98", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-mod-d1b278826d6b8b11", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-owenrumney-go-sarif-d1f5bd5b7286bb87", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-nwaples-rardecode-v2-d4d6c0de5c012f4e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-sync-d6e4d0bdd2979199", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-d842b7c69cf11184", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-CycloneDX-cyclonedx-go-d959068b8fc63e2e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-dae48cfe6416f229", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-db0384e876064a63", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-zyedidia-generic-dcf5ca6371b407c0", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-ddd26704e01faf36", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-errors-de0976b78aa42f83", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-diskfs-go-diskfs-de62268a6b8c32b2", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-therootcompany-xz-dea12b3bbd27596b", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-accept-encoding-dea2b9aa54559e88", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-stereoscope-def7ba1477147e3b", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-adrg-xdg-e0891862c4cac5c8", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-e15e95e42851d307", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sts-e17d116f1cf3ec26", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-e19038fc7a2b5d5e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-locker-e198aa2c026bb124", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-syft-e23a7872bb863241", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-goccy-go-yaml-e274fe478c1781d0", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-endpoints-v2-e38c26f21d58c139", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gpustack-gguf-parser-go-e52630e092fbf180", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pandatix-go-cvss-e535655f18a0daf3", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-e652a5c32fec0aea", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-e725f5d713e63e52", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-x-term-e7eee4c6245c1233", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-e93f6e072d3eb108", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go4.org-ea62044ab737b10f", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-lzo-ea6ddc3fd7b3d982", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-iam-ea6e46a2627f6639", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-struct-converter-eba295ed97445f65", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-wagoodman-go-presenter-ec87d7c3c24877e6", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cast-ecdb441b7a6a5574", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-muesli-termenv-ede4acf0f5336f48", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbatts-go-mtree-ee622f7616eb79e1", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-agext-levenshtein-ee8eaef48d79c008", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-memory-eeaed50a1393dcbd", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bodgit-windows-ef5ac3e091576971", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-wagoodman-go-partybus-f0fc2150eea547a1", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-v4a-f3305bdd9b3db3eb", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-plugin-f42370aaaa9fb186", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-profile-f476746390bae2a1", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-userns-f4b65e737d877d28", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-json-iterator-go-fa06175dc23ac437", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-dsnet-compress-fae06b0d6f5dc64c", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-fb964e8164e696bd", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-detectors-gcp-fc5e355d4bbe3248", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-fc60af9e2071027f", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-mathutil-fc9ea68bba38fa6f", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-golang-groupcache-fcaafcc5bbb94cad", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-x-ansi-fcdfb91c59e5703a", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mholt-archives-fd1638e7958a61c3", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-fd18afd155427906", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-xattr-fda4ce011c4a67f3", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-git-go-billy-v5-ffc8a700d518bd7f", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tailscale-hujson-ffd87a9c5e557fbc", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-cel.dev-expr-66459580bf7a7e04", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-96f30eed3dcf47d6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-auth-d1315c1ed6472c98", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-8daf85f07d1f9bd4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-b8b9e3d458661ae5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-iam-ea6e46a2627f6639", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-monitoring-b6e32202d8793812", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-storage-76c0a18b76e9137b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-dario.cat-mergo-7deae5420e1b47ee", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-dae48cfe6416f229", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-CycloneDX-cyclonedx-go-d959068b8fc63e2e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-DataDog-zstd-45f62db135a90027", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-detectors-gcp-fc5e355d4bbe3248", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-exporter-metric-4404509dfe209dc7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-internal-resourcemapping-467f7305ea4aa564", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Intevation-gval-6dff92b7e5be3013", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Intevation-jsonpath-2f65285022a20c22", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-e15e95e42851d307", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-a947ed0b63ec6067", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-1e21e65642531c72", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-OneOfOne-xxhash-268c1393e1d83864", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-83c14885dace4635", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-STARRY-S-zip-aed46e25538b7606", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-e725f5d713e63e52", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-acobaugh-osrelease-30a5db8da0ff56a6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-adrg-xdg-e0891862c4cac5c8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-agext-levenshtein-ee8eaef48d79c008", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-bubbly-30320a28b355d7ac", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-clio-79025f8f682dd2ae", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-fangs-b4abd7cadb17e8ba", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-collections-437dcbd7406868fc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-homedir-7131c931cb44f99e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-logger-9f48985cf195bec4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-lzo-ea6ddc3fd7b3d982", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-macholibre-b396092ea43b5373", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-rpmdb-39f192dfda34c98c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-struct-converter-eba295ed97445f65", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-sync-d6e4d0bdd2979199", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-version-629d983eae734de2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-d1ca6cfcbe7837c8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-packageurl-go-7967a2607dacb794", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-stereoscope-def7ba1477147e3b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-e23a7872bb863241", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-andybalholm-brotli-c810bc1c88e06120", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-107fbe88aac1270d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aquasecurity-go-pep440-version-652c6488eaa1fc38", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aquasecurity-go-version-981bd9d8519fadcc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-araddon-dateparse-5ab060d70c5c231c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-560c186d7f368c2b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-aws-protocol-eventstream-3ff67073b2112feb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-config-464f7852e61af8f5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-credentials-8c5ee7ff20b7d496", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-feature-ec2-imds-07ee7ac8d6398a86", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-configsources-8902dcc71c8471b1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-endpoints-v2-e38c26f21d58c139", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-v4a-f3305bdd9b3db3eb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-accept-encoding-dea2b9aa54559e88", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-checksum-b560f26fed3fc8f9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-presigned-url-08ac5b71dad8bc0c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-s3shared-20d77e6d4ffc4c03", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-s3-15c6fdf382323ef3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-signin-262380d7d6bdad2e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sso-3c2f916221eafa4d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-ssooidc-1f2abd7df6bc4e06", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sts-e17d116f1cf3ec26", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-smithy-go-4442bf8918f47ef1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aymanbagabas-go-osc52-v2-7530bb1e5a81566e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-becheran-wildmatch-go-936f65df86b9d841", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bgentry-go-netrc-b88c6679fc34e461", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bitnami-go-version-b099749efd929a31", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-blakesmith-ar-233a3a1db7514868", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v2-80d921310727b332", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v4-a6cff570e02e0077", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bodgit-plumbing-a8c64b07bd880952", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bodgit-sevenzip-93f0e50a80b91215", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bodgit-windows-ef5ac3e091576971", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-b4b3e3b6bbeb38a4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbles-ba8b0f51b2044a99", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbletea-55cfdf15bb977f37", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-colorprofile-9850cc3bd47db4ff", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-harmonica-36c4b0ba9a28945b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-lipgloss-0033c3f04e070aef", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-x-ansi-fcdfb91c59e5703a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-x-cellbuf-85e76e4363874688", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-x-term-e7eee4c6245c1233", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-clipperhouse-displaywidth-6214fe511830b901", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-0b7986138a195082", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cloudflare-circl-0e9dc29c10c22c09", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cncf-xds-go-ac7c52b884135991", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-3542e5b177dc1174", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-bef3e0743281d3f6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-continuity-9373639ad05405cb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-errdefs-3f2625e2585567c0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-241973ec95f399a0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-fifo-b27f86aaf92f1c6d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-log-0edc98826656b188", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-platforms-93b62a2ab7e859df", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-plugin-f42370aaaa9fb186", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-0e12a32f0026cb84", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-fc60af9e2071027f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-44156b24e7680a21", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-deitch-magic-6e619bc099d48271", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-diskfs-go-diskfs-de62268a6b8c32b2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-distribution-reference-d115cd569f1476a6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-cli-2940e9f8bc98a455", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-docker-a523354ed056bb5c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-7aa77e66581b858e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-go-connections-20f80b36500118ad", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-go-units-913e78da6bbc1250", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dsnet-compress-fae06b0d6f5dc64c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dustin-go-humanize-76654d868f765bc7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-elliotchance-phpserialize-58dfb0d55aecbee3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-emirpasic-gods-0db0d1c958bd8ca2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-envoyproxy-go-control-plane-envoy-b086475a7700b6fd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-envoyproxy-protoc-gen-validate-98aa640d31f6717e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-facebookincubator-nvdtools-4e581d0780b65cf8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fatih-color-7feb4a635cba59f3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-felixge-fgprof-95dfcb59e676c4cc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-0523a0460ca488e7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-7babc8fffd6a066d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gabriel-vasile-mimetype-ba707fa8ab81bbb6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-github-go-spdx-v2-2a26b3e36c20e162", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-glebarez-go-sqlite-2f4c20e1963adc7d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-glebarez-sqlite-9cde7301346af6d6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-git-gcfg-4fcf321caaa7171f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-git-go-billy-v5-ffc8a700d518bd7f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-git-go-git-v5-cb7be3d9e525bd44", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-db0384e876064a63", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-logr-a122363e32d429b7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-stdr-529747e4d6102b32", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-restruct-restruct-2564a4f65057068e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-d0adf17e3b3e20b7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-goccy-go-yaml-e274fe478c1781d0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gocsaf-csaf-v3-217662299146216c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gogo-protobuf-6ea233073fd787cc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gohugoio-hashstructure-d0ab6c7c1e979ff7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-golang-groupcache-fcaafcc5bbb94cad", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-cmp-bd8f7c7d9ba26ba1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-62f38c3ca70a22bf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-licensecheck-ad5dc018457a8915", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-pprof-95e78ee30268b524", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-s2a-go-388c921bac03d721", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-uuid-a30e321677d3fd85", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-ac78ba7c2e106c55", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-6f148ad76a49d8ef", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gookit-color-523d4334c319f84c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gpustack-gguf-parser-go-e52630e092fbf180", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hako-durafmt-9d5b1c25f93d3a84", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-aws-sdk-go-base-v2-a6658289be6d149b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-4235cfcfd78e5b24", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-429f93f83be135dd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-getter-0114dbe1beb69223", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-20fe82145f89ff3e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-a3a35df68b4ad7fb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-golang-lru-v2-0f672f8f774746b2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-7e176c7d27f1ffcc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-henvic-httpretty-3dcb72895bacb234", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-huandu-xstrings-2757d0137f8f3120", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-iancoleman-strcase-79f34bf20e302fa8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-in-toto-attestation-603be52049552c98", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jbenet-go-context-367dfb65da7dde90", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jinzhu-copier-7647ab69f990ae85", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jinzhu-inflection-adf8344b986f214d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jinzhu-now-4e11d6dcf148f1c5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-json-iterator-go-fa06175dc23ac437", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-kastenhq-goversion-ae521c778a1debfa", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-kevinburke-ssh-config-6d6846cac292b744", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-klauspost-compress-a04b227c79d591b5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-318c5f17aafb0c35", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-knqyf263-go-apk-version-54e2ae76ad3f158e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-knqyf263-go-deb-version-2b6ebcdc95c3e889", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-lucasb-eyer-go-colorful-701de8a04f672eb0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-masahiro331-go-mvn-version-10529021c13e90a0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-fd18afd155427906", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-0efada52533c3099", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-342ae09cb029fd51", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mgutz-ansi-0920edf93afa5844", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mholt-archives-fd1638e7958a61c3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mikelolasagasti-xz-b2db22f7a73dc8c3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-minio-minlz-93263cefa03934ed", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-4215e393881dda04", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-go-homedir-3c0b5fbaf936edee", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-b2bc836f9bcb390d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-d842b7c69cf11184", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-1f3c8d88a0047d8f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-locker-e198aa2c026bb124", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-moby-api-5204d657c6fa23cb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-moby-client-c2a98f8372d21854", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-7f112aee95e2ecb5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-signal-5cda820b30905462", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-user-886d21bd75e881b2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-userns-f4b65e737d877d28", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-c0987934af1dede5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-43ef29c658c306bd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-muesli-ansi-830a7faa4aa432fb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-muesli-cancelreader-83da796cfea83aca", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-muesli-termenv-ede4acf0f5336f48", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-nix-community-go-nix-b2fa38e2a17816eb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-nwaples-rardecode-v2-d4d6c0de5c012f4e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-olekukonko-cat-c0dfb98af08588f6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-olekukonko-errors-c5d2d53cb0eb4360", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-olekukonko-ll-976b0d2881d1ca97", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-olekukonko-tablewriter-6e7d3e060383c38f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-c9af4ce3fdd649cf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-80e4443835858b9d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-e93f6e072d3eb108", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-openvex-go-vex-b20fbf004b07e8d2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-owenrumney-go-sarif-d1f5bd5b7286bb87", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-package-url-packageurl-go-73f43f2f13b55a04", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pandatix-go-cvss-e535655f18a0daf3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pborman-indent-36075ba7843ffa88", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-b228c33bafd8a571", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-66c4de9fe7df7c50", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-2c5075e93967a01c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-piprate-json-gold-c9490b0aa636ba8f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pjbgf-sha1cd-33ee9fa15c85467a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-errors-de0976b78aa42f83", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-profile-f476746390bae2a1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-xattr-fda4ce011c4a67f3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pquerna-cachecontrol-645cbe4288301f73", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-remyoudompheng-bigfft-b9b6305b2aded0ec", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-rivo-uniseg-ab5a832b97aee5be", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-rust-secure-code-go-rustaudit-5211330e6a0a7ddc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-73865f4d359fe7ed", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-saintfish-chardet-9fbb3f4db7a935a1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-santhosh-tekuri-jsonschema-v6-2238944e2a6be877", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sassoftware-go-rpmutils-ceec0eaa75c074b5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-scylladb-go-set-7e977b8d9181af46", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sergi-go-diff-b5c5dc83557bdda9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-shopspring-decimal-290cd270c04c031c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-233157a6dc0b989f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-skeema-knownhosts-b571e7b7b5403b89", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-smallnest-ringbuffer-ca40aa2c7b5f6da4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sorairolake-lzip-go-baddd917eff58f76", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sourcegraph-conc-9257804278d56b66", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spdx-gordf-bc640265fcc4acc5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spdx-tools-golang-7857925cb400e0d0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-afero-9c6b6cdd51c4784e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-cast-ecdb441b7a6a5574", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-cobra-4fde74ccf0d4998c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-pflag-40b1f287cd57a5c7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-viper-0f37bfc7b2d96566", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spiffe-go-spiffe-v2-03c68604f57b4741", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-subosito-gotenv-3cda5ee5250cabee", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-ba7789f8e63b103c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sylabs-squashfs-ae5c2086bd91b11b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tailscale-hujson-ffd87a9c5e557fbc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-therootcompany-xz-dea12b3bbd27596b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-979c3c1582da233b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vbatts-go-mtree-ee622f7616eb79e1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vifraa-gopom-90ccd904c2408318", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-wagoodman-go-partybus-f0fc2150eea547a1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-wagoodman-go-presenter-ec87d7c3c24877e6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-wagoodman-go-progress-ce78c6f0325a9ca8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-xanzy-ssh-agent-865acd2a6c43d907", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-xi2-xz-a2bdb18bf5d0e288", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-xo-terminfo-9a89e52a7e14d868", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-8a6d77ef14940fd0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-zyedidia-generic-dcf5ca6371b407c0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-go.etcd.io-bbolt-7fbeb7171aa8a76d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-fb964e8164e696bd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-detectors-gcp-55c43c793aa25633", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-71573abbc1ef03eb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-ddd26704e01faf36", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-e19038fc7a2b5d5e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-7178bc1c99ba455f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-7897af7eff391110", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-3ebc4c0c63921ca8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-376e8db55aa8303b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-52846ed3b72b970d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-go4.org-ea62044ab737b10f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-crypto-91fd075daa6db87d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-exp-5f5a8b89eb1e2e4a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-mod-d1b278826d6b8b11", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-net-02f72eb5c32daaf6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-oauth2-c024415239ef086b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sync-e652a5c32fec0aea", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sys-60e80e1b9e85325b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-term-6b724b4554d57b93", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-text-c0fae8d9173f6f8d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-time-a8924caf483787b8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-tools-9dfc76e848e5458c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-xerrors-c33e64efc6c2dc66", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-api-32f153af8d3eec0b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-123baded69448bf0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-7d99329c26b5c44e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-21807e717ffd2b14", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-grpc-b7a48a71952e46e2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-protobuf-7a19ee88cdf80c8c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-gopkg.in-warnings.v0-62dc26b49c827903", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-32b8daf3599a6d08", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-gorm.io-gorm-b91d65a304d35f59", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-rpm-grype-b91008818cbc1820", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-howett.net-plist-a12bd6a3cfcd37f9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-modernc.org-libc-06527532817d672e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-modernc.org-mathutil-fc9ea68bba38fa6f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-modernc.org-memory-eeaed50a1393dcbd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-modernc.org-sqlite-205b992849f4483a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-stdlib-765c93b72a178fff", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-s390x-grype", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.s390x"}, {"spdxElementId": "SPDXRef-Package-rpm-grype-2f73667f8e626d4a", "relatedSpdxElement": "SPDXRef-File-...bin-grype-0.119.0-0.2.hum1.s390x.debug-7639c6f0e48ac4a0", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-debuginfo-0.119.0-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-rpm-grype-2f73667f8e626d4a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-grype-debuginfo-0.119.0-0.2.hum1.s390x", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-s390x-grype-debuginfo", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-grype-debuginfo-0.119.0-0.2.hum1.s390x"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-grype-debugsource-0.119.0-0.2.hum1.s390x", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-s390x-grype-debugsource", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-grype-debugsource-0.119.0-0.2.hum1.s390x"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jbenet-go-context-02177c275c48792e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-aws-protocol-eventstream-02c09c7ee90be1e5", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spdx-tools-golang-03857efeba63785a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Intevation-gval-05d53b5456960611", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tailscale-hujson-0624084c7c037b92", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-golang-lru-v2-0830468243aa0f2c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbatts-go-mtree-087fb1b66d450edf", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-096c940afa984d56", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-lzo-0ae7262b8bdaa7dc", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-fangs-0c473aaf656c2aa0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pquerna-cachecontrol-0fd6b6eaf5b54c0d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bgentry-go-netrc-0fea42078665f197", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-restruct-restruct-10122f73574216f0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-101e2c578ca9d1ed", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-nix-community-go-nix-10992e6d0052e3e9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-smallnest-ringbuffer-10a781e91b194892", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bodgit-windows-1171f190fdc2fb2f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-wagoodman-go-presenter-168f8e59cf1dd460", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-wagoodman-go-partybus-17a9db0e0d6075bf", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-envoyproxy-go-control-plane-envoy-19501f2298ba256b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-1ab117ccbd042403", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-homedir-1acc7dee132a7e74", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-harmonica-1c9f1265c8c6f415", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-CycloneDX-cyclonedx-go-1ccec3285c5bc968", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-1d875db53206d26a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gookit-color-1dd37bef036a2a62", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-araddon-dateparse-1fcabdf9e84a93da", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-presigned-url-1fe331fd4acea98e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-profile-209e8e159042f6f3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-20c2c401ba07fcf3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-dustin-go-humanize-2152051a3e485ce9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gabriel-vasile-mimetype-2307b2f8849a0240", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-231923fe32d1fad9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-stereoscope-25accd7e7ce550c9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-2885c1612f84aeeb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-29c9568dc1219a6b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-29cf604dc371b6ff", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sergi-go-diff-2adfb12147b60c6b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-configsources-2bf37ef9955582c7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-api-2c7803bf8d41d2ed", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-2d49ea55efd588d3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-golang-groupcache-2e395983502626d7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-memory-311d693ee04928eb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-git-go-git-v5-31272155567d6912", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sso-31cc429250c3d4bb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-time-325a6cda1d9f9762", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-plugin-343af9cbe5533124", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bodgit-sevenzip-343e945190f7f50b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-tablewriter-356c63f97f4fd6e9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-38133ac19716a5be", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-dsnet-compress-385a53b14c3137fa", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-checksum-38b23488ff17ea67", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-38d7aae755fe06b4", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-3919b6d7c996f66b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-3be7c49c318b17ac", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-version-3c77e50e4b0d8d50", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-3e55a9d13773d7f8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-3f0c5e2c98725b03", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-3fa2809212168442", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-3fdcec0e7354ffe4", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-detectors-gcp-400ecfe05d06962a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-internal-resourcemapping-4012720b611c6ce2", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-github-go-spdx-v2-405e062149c98650", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-4086e54e112438ae", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-4261642149e6e223", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-sync-429d8a46f6f27ed7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-git-go-billy-v5-4304949a0ab6da99", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-collections-43cab541fc797d9e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cncf-xds-go-44e4999b6b99f41f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-4647097880112783", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jinzhu-now-46d21d04ed75fe9b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-muesli-termenv-49bd8a42374175ae", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-therootcompany-xz-4c3e21dece5a3d4d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-lipgloss-4d053589b69133bd", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-scylladb-go-set-4d352891da965f64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-lucasb-eyer-go-colorful-4e29765e1c8e378a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-4eb5ad212587f8c9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-STARRY-S-zip-4ed21f6385528904", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go4.org-4ed8aa31b900d501", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-cli-4ee99b27f6d9c593", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gohugoio-hashstructure-4f5d86992f7f4e69", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-package-url-packageurl-go-5009e51e4d89d17e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-fgprof-5095fba777deaa6a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-clio-51ae09fe7fc71630", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-gorm.io-gorm-51b148e9577e7fa3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-52ab0fb27f435389", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-minio-minlz-5386fd495c6c2677", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cloudflare-circl-552ebe0b77defbc3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-openvex-go-vex-5565059bb56f11f4", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-55c740ad726abec6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aymanbagabas-go-osc52-v2-564750f5b1fb9388", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-emirpasic-gods-570013ee36476888", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-subosito-gotenv-57eaa019d15f9c90", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-blakesmith-ar-5828026f5da48c2a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bodgit-plumbing-594c467dad20f68c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-macholibre-59b06ea00226fcf1", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-mod-5a5a281bf6ed373f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-adrg-xdg-5b7b28691a85ace2", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-5c993170322ff726", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-getter-5d0cbdab125b2831", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-errors-5e072495feb31932", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-5f674858265518ea", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-cmp-60978427708fb05f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pjbgf-sha1cd-61970a01a83b4f58", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-639015613fb8b889", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-6396de215f422d6f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-skeema-knownhosts-64911e8660667937", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Intevation-jsonpath-665bf1a8a6d53d1c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-682e9d48586e04f9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mholt-archives-6ac0930d7638bde9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aquasecurity-go-version-6b592919e8aabd22", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-cat-6ba8fb0898d6dd18", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-6c3b178b90746ff7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-licensecheck-6cde3c8b11d05047", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-rivo-uniseg-6e232d02dd896744", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-6e3ae06acc6bf600", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-6f1561bf6b96fa60", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-712ee505e63cd3de", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-zyedidia-generic-71339daa07d5b16a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-729906c6425c12c7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-logger-7387d11b9e3d6932", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-dario.cat-mergo-7578909db6771690", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-config-76462428d9a013e3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-stdlib-765c93b72a178fff", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-7922a3d811bae956", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-huandu-xstrings-7b51bf0337947eee", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-glebarez-go-sqlite-7d78191a13754ef3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-api-7d9894353ad2738d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aquasecurity-go-pep440-version-7db1070c60e5e4ca", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sorairolake-lzip-go-7e23ed655aac8c4c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-piprate-json-gold-7e2735597a6c1995", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-platforms-7e52ac85fd635425", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mgutz-ansi-803688aaf5149e1e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gpustack-gguf-parser-go-815bd82aa900d29a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-821e89cdbb290250", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-client-82f8ed5ceb12af1a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spiffe-go-spiffe-v2-835334c9e210045f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bitnami-go-version-837d03c9e4e27ecf", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-iancoleman-strcase-8485f32cb554394e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-json-iterator-go-849b898c5dee5b55", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-84b13f8b8fabc678", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-84e4460d3b52c566", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-diskfs-go-diskfs-851de5f5d49841ec", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-nwaples-rardecode-v2-85c50e99369d0f00", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-85f4e102d50724ab", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-owenrumney-go-sarif-85f8b4ac1c0aeb01", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-8608c3e00128cb9c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pborman-indent-86eefd4825f2f47a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-git-gcfg-87209058f2438d99", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-libc-8b07475c1530d62c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-8bd908fd2f703bb2", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-8c13777d8eca1d47", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-x-ansi-8cbf485ea8226790", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-8d7166932605a8fa", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-8d9022dafc358585", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gocsaf-csaf-v3-9048877e8c80ce5a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-monitoring-90d81c2f258a584c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-exporter-metric-914cd3b51ebcdac9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-92a51c05ef2fe0b7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-muesli-cancelreader-93ab69e4ef0e1c30", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-pprof-93b67eaf85f85586", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-9462749502aa22d7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sassoftware-go-rpmutils-94c7b7363578a827", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-santhosh-tekuri-jsonschema-v6-96cbf3b038db71f1", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-warnings.v0-97ac151894b5c641", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-97bca7fb5b457a25", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-98a867f7f9afb728", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-goccy-go-yaml-9964b26a60168c56", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-syft-99d6607d0428a2bb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-errors-9a09a111b14c8225", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-9c22df4c1d35a71d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-compress-9cd2c161ed4f7383", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-packageurl-go-9ce180049b14c92a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kevinburke-ssh-config-9d4e5c11f65975ee", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-units-9d751bbcb0abbd2a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-saintfish-chardet-9d8ea0e3753aa793", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-9e455a5874229c0e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-9e58cceec8176db0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-s2a-go-9eb31f26ff53e617", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-envoyproxy-protoc-gen-validate-9edbbd1c71cd33bc", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-mathutil-9f243161fa75f8b9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-9f5f86a04390156f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-signin-a0107481b8cb9e1c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-a0ea6b899ab38a0c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-distribution-reference-a12b09e551205dfc", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v4-a162dc5be54f5eb1", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v2-a18427aa19091e58", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-aws-sdk-go-base-v2-a1dad38bc18b2121", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-a2d32bfdf9fbc222", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-a518b7c4dc7c2161", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-wagoodman-go-progress-a60ac791901a489e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-s3shared-a69c47e526b5d2f9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-remyoudompheng-bigfft-a7938ac6a8d2438e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gogo-protobuf-a9cf386f92835f5e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-signal-aad7bd6ecdf0ce10", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-oauth2-ace2f37ad59aca35", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-OneOfOne-xxhash-adafb897d44e4076", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-adc09a42117fb1ad", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-acobaugh-osrelease-afa1a167852ad4b8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-exp-afd186f203b2c920", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-b03a3ffaa1d8f799", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-knqyf263-go-apk-version-b05939fcf2b6196c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-muesli-ansi-b059c86e70e64f5d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-glebarez-sqlite-b2580c4d41b57f44", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-afero-b2a7e22827201ba8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-xerrors-b426ddd369b78004", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-connections-b477a1fd062aa373", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-xi2-xz-b47f284caf2ee05e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-masahiro331-go-mvn-version-b59537c387187cce", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sourcegraph-conc-b610f6093d90f584", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-endpoints-v2-b6265f9b5eff991b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-b6573c76175f5add", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-elliotchance-phpserialize-b796bb62aafa8b5d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-b805a6f5281675df", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-feature-ec2-imds-b86f7bc0ae23ad30", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-b96f71f998409b56", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-henvic-httpretty-bb3bc723ae1d8e92", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-term-bdd9a3bb99d412dd", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-iam-be69052a12f1cd47", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-s3-c09def8bd2da4341", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-c184e76913d792e3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-becheran-wildmatch-go-c280892f1f67e7c7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fatih-color-c3455e6d84c9bb95", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hako-durafmt-c39cca3b5dbc5b2a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-c4357a402179b1d8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-v4a-c458fe963dd49d25", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-c4aa28c0bab1c7fe", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-ssooidc-c4ac5da9ee688e44", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-agext-levenshtein-c4c9ac087c52e4ce", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-bubbly-c4e6c0fa4f99cd46", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-c525b351dea6a5f6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-deitch-magic-c5a9f2645fc4f0a3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-detectors-gcp-c6b55f2c3502a679", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-xattr-c705d5da8845259d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-andybalholm-brotli-c7758d1df10ff55e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-struct-converter-c8bbac039e8accfb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-cd04e01fb0f84b45", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-facebookincubator-nvdtools-cd620062141ee186", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-x-term-cef6cc5c1b739279", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-knqyf263-go-deb-version-cf9dc83015e1b8d7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-rust-secure-code-go-rustaudit-d0feed12929c7472", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-d24a40277ca9d1ed", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-d2859347e22c5669", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-smithy-go-d2a8ee5a52312db7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-continuity-d39f3c9e33e66d29", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-d3f8ee4ffbdeb36e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vifraa-gopom-d404aa5e0addb552", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-d45b168fafbcdf09", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-d56c589c31a1a439", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-shopspring-decimal-d589aeec3cde6d5e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-go-homedir-d61dc0ba9cc28254", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-d75f178b5a92f86e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-fifo-d7b8c24758b961df", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-displaywidth-d8f5af40ae3a550f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sylabs-squashfs-d98850668029f079", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-d9c3066247fb6041", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-xo-terminfo-da5986f729d2b186", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-accept-encoding-da65611700e7c9b2", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-da95a517a7ac61dc", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cel.dev-expr-dab9cabb72d5bb46", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-daf4a7040134301f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spdx-gordf-db918073cad270bb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-dbe863e4bdbc004b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-dd338f46846ec59b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-ll-dd7e5896e57f9035", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-in-toto-attestation-df73c4980ae9eeda", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-rpmdb-e02b41901dd8e416", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-locker-e08071f0563e71fe", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.etcd.io-bbolt-e1e253dcb13764ff", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-log-e2425233221d9aa2", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-e42947b05a7f7dcd", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jinzhu-copier-e4d4766289ac4d23", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-x-cellbuf-e5b3e7c100e94ba2", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-e6eac968d55b3c0e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbles-e7fd891e0ae77807", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-sqlite-e8e324b6634ac9c0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-credentials-e9783d2a7e870dd0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-ea1898b159775c0e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-storage-ea25db81f3081631", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-user-ea8fdfac8a89db68", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-xanzy-ssh-agent-eaded4981ff20a09", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-eca691156e4ed326", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-colorprofile-edc527343984daed", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-tools-ee25b22649e525aa", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-efa2c5969ef840cc", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cast-efbd773a409aeb56", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-userns-f103bfd274996b4e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sts-f14f84c1c5c64160", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-viper-f27cd3efd3ed4f94", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbletea-f2bf812afd2d5439", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-cpuid-v2-f36972a147f11ffa", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-f80c5e0d70823c1a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-howett.net-plist-fa4f2002d66d6993", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pandatix-go-cvss-fcf1dbfe08c6d801", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kastenhq-goversion-fdcf81ff411c4c7c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mikelolasagasti-xz-ff8919a38538eb8d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-DataDog-zstd-ffa857083cc5fee1", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jinzhu-inflection-ffc6e4b305e0f0a7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jbenet-go-context-02177c275c48792e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-aws-protocol-eventstream-02c09c7ee90be1e5", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spdx-tools-golang-03857efeba63785a", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Intevation-gval-05d53b5456960611", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tailscale-hujson-0624084c7c037b92", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-golang-lru-v2-0830468243aa0f2c", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbatts-go-mtree-087fb1b66d450edf", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-096c940afa984d56", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-lzo-0ae7262b8bdaa7dc", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-fangs-0c473aaf656c2aa0", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pquerna-cachecontrol-0fd6b6eaf5b54c0d", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bgentry-go-netrc-0fea42078665f197", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-restruct-restruct-10122f73574216f0", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-101e2c578ca9d1ed", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-nix-community-go-nix-10992e6d0052e3e9", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-smallnest-ringbuffer-10a781e91b194892", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bodgit-windows-1171f190fdc2fb2f", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-wagoodman-go-presenter-168f8e59cf1dd460", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-wagoodman-go-partybus-17a9db0e0d6075bf", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-envoyproxy-go-control-plane-envoy-19501f2298ba256b", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-1ab117ccbd042403", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-homedir-1acc7dee132a7e74", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-harmonica-1c9f1265c8c6f415", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-CycloneDX-cyclonedx-go-1ccec3285c5bc968", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-1d875db53206d26a", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gookit-color-1dd37bef036a2a62", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-araddon-dateparse-1fcabdf9e84a93da", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-presigned-url-1fe331fd4acea98e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-profile-209e8e159042f6f3", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-20c2c401ba07fcf3", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-dustin-go-humanize-2152051a3e485ce9", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gabriel-vasile-mimetype-2307b2f8849a0240", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-231923fe32d1fad9", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-stereoscope-25accd7e7ce550c9", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-2885c1612f84aeeb", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-29c9568dc1219a6b", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-29cf604dc371b6ff", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sergi-go-diff-2adfb12147b60c6b", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-configsources-2bf37ef9955582c7", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-api-2c7803bf8d41d2ed", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-2d49ea55efd588d3", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-golang-groupcache-2e395983502626d7", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-memory-311d693ee04928eb", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-git-go-git-v5-31272155567d6912", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sso-31cc429250c3d4bb", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-time-325a6cda1d9f9762", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-plugin-343af9cbe5533124", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bodgit-sevenzip-343e945190f7f50b", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-tablewriter-356c63f97f4fd6e9", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-38133ac19716a5be", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-dsnet-compress-385a53b14c3137fa", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-checksum-38b23488ff17ea67", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-38d7aae755fe06b4", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-3919b6d7c996f66b", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-3be7c49c318b17ac", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-version-3c77e50e4b0d8d50", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-3e55a9d13773d7f8", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-3f0c5e2c98725b03", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-3fa2809212168442", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-3fdcec0e7354ffe4", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-detectors-gcp-400ecfe05d06962a", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-internal-resourcemapping-4012720b611c6ce2", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-github-go-spdx-v2-405e062149c98650", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-4086e54e112438ae", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-4261642149e6e223", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-sync-429d8a46f6f27ed7", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-git-go-billy-v5-4304949a0ab6da99", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-collections-43cab541fc797d9e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cncf-xds-go-44e4999b6b99f41f", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-4647097880112783", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jinzhu-now-46d21d04ed75fe9b", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-muesli-termenv-49bd8a42374175ae", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-therootcompany-xz-4c3e21dece5a3d4d", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-lipgloss-4d053589b69133bd", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-scylladb-go-set-4d352891da965f64", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-lucasb-eyer-go-colorful-4e29765e1c8e378a", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-4eb5ad212587f8c9", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-STARRY-S-zip-4ed21f6385528904", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go4.org-4ed8aa31b900d501", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-cli-4ee99b27f6d9c593", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gohugoio-hashstructure-4f5d86992f7f4e69", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-package-url-packageurl-go-5009e51e4d89d17e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-fgprof-5095fba777deaa6a", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-clio-51ae09fe7fc71630", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-gorm.io-gorm-51b148e9577e7fa3", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-52ab0fb27f435389", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-minio-minlz-5386fd495c6c2677", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cloudflare-circl-552ebe0b77defbc3", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-openvex-go-vex-5565059bb56f11f4", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-55c740ad726abec6", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aymanbagabas-go-osc52-v2-564750f5b1fb9388", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-emirpasic-gods-570013ee36476888", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-subosito-gotenv-57eaa019d15f9c90", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-blakesmith-ar-5828026f5da48c2a", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bodgit-plumbing-594c467dad20f68c", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-macholibre-59b06ea00226fcf1", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-mod-5a5a281bf6ed373f", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-adrg-xdg-5b7b28691a85ace2", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-5c993170322ff726", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-getter-5d0cbdab125b2831", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-errors-5e072495feb31932", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-5f674858265518ea", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-cmp-60978427708fb05f", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pjbgf-sha1cd-61970a01a83b4f58", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-639015613fb8b889", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-6396de215f422d6f", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-skeema-knownhosts-64911e8660667937", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Intevation-jsonpath-665bf1a8a6d53d1c", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-682e9d48586e04f9", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mholt-archives-6ac0930d7638bde9", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aquasecurity-go-version-6b592919e8aabd22", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-cat-6ba8fb0898d6dd18", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-6c3b178b90746ff7", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-licensecheck-6cde3c8b11d05047", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-rivo-uniseg-6e232d02dd896744", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-6e3ae06acc6bf600", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-6f1561bf6b96fa60", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-712ee505e63cd3de", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-zyedidia-generic-71339daa07d5b16a", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-729906c6425c12c7", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-logger-7387d11b9e3d6932", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-dario.cat-mergo-7578909db6771690", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-config-76462428d9a013e3", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-stdlib-765c93b72a178fff", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-7922a3d811bae956", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-huandu-xstrings-7b51bf0337947eee", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-glebarez-go-sqlite-7d78191a13754ef3", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-api-7d9894353ad2738d", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aquasecurity-go-pep440-version-7db1070c60e5e4ca", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sorairolake-lzip-go-7e23ed655aac8c4c", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-piprate-json-gold-7e2735597a6c1995", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-platforms-7e52ac85fd635425", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mgutz-ansi-803688aaf5149e1e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gpustack-gguf-parser-go-815bd82aa900d29a", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-821e89cdbb290250", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-client-82f8ed5ceb12af1a", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spiffe-go-spiffe-v2-835334c9e210045f", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bitnami-go-version-837d03c9e4e27ecf", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-iancoleman-strcase-8485f32cb554394e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-json-iterator-go-849b898c5dee5b55", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-84b13f8b8fabc678", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-84e4460d3b52c566", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-diskfs-go-diskfs-851de5f5d49841ec", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-nwaples-rardecode-v2-85c50e99369d0f00", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-85f4e102d50724ab", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-owenrumney-go-sarif-85f8b4ac1c0aeb01", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-8608c3e00128cb9c", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pborman-indent-86eefd4825f2f47a", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-git-gcfg-87209058f2438d99", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-libc-8b07475c1530d62c", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-8bd908fd2f703bb2", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-8c13777d8eca1d47", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-x-ansi-8cbf485ea8226790", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-8d7166932605a8fa", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-8d9022dafc358585", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gocsaf-csaf-v3-9048877e8c80ce5a", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-monitoring-90d81c2f258a584c", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-exporter-metric-914cd3b51ebcdac9", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-92a51c05ef2fe0b7", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-muesli-cancelreader-93ab69e4ef0e1c30", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-pprof-93b67eaf85f85586", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-9462749502aa22d7", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sassoftware-go-rpmutils-94c7b7363578a827", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-santhosh-tekuri-jsonschema-v6-96cbf3b038db71f1", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-warnings.v0-97ac151894b5c641", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-97bca7fb5b457a25", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-98a867f7f9afb728", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-goccy-go-yaml-9964b26a60168c56", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-syft-99d6607d0428a2bb", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-errors-9a09a111b14c8225", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-9c22df4c1d35a71d", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-compress-9cd2c161ed4f7383", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-packageurl-go-9ce180049b14c92a", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kevinburke-ssh-config-9d4e5c11f65975ee", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-units-9d751bbcb0abbd2a", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-saintfish-chardet-9d8ea0e3753aa793", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-9e455a5874229c0e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-9e58cceec8176db0", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-s2a-go-9eb31f26ff53e617", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-envoyproxy-protoc-gen-validate-9edbbd1c71cd33bc", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-mathutil-9f243161fa75f8b9", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-9f5f86a04390156f", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-signin-a0107481b8cb9e1c", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-a0ea6b899ab38a0c", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-distribution-reference-a12b09e551205dfc", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v4-a162dc5be54f5eb1", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v2-a18427aa19091e58", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-aws-sdk-go-base-v2-a1dad38bc18b2121", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-a2d32bfdf9fbc222", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-a518b7c4dc7c2161", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-wagoodman-go-progress-a60ac791901a489e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-s3shared-a69c47e526b5d2f9", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-remyoudompheng-bigfft-a7938ac6a8d2438e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gogo-protobuf-a9cf386f92835f5e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-signal-aad7bd6ecdf0ce10", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-oauth2-ace2f37ad59aca35", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-rpm-grype-acff62daee366b39", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-OneOfOne-xxhash-adafb897d44e4076", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-adc09a42117fb1ad", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-acobaugh-osrelease-afa1a167852ad4b8", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-exp-afd186f203b2c920", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-b03a3ffaa1d8f799", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-knqyf263-go-apk-version-b05939fcf2b6196c", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-muesli-ansi-b059c86e70e64f5d", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-glebarez-sqlite-b2580c4d41b57f44", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-afero-b2a7e22827201ba8", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-xerrors-b426ddd369b78004", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-connections-b477a1fd062aa373", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-xi2-xz-b47f284caf2ee05e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-masahiro331-go-mvn-version-b59537c387187cce", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sourcegraph-conc-b610f6093d90f584", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-endpoints-v2-b6265f9b5eff991b", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-b6573c76175f5add", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-elliotchance-phpserialize-b796bb62aafa8b5d", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-b805a6f5281675df", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-feature-ec2-imds-b86f7bc0ae23ad30", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-b96f71f998409b56", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-henvic-httpretty-bb3bc723ae1d8e92", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-term-bdd9a3bb99d412dd", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-iam-be69052a12f1cd47", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-s3-c09def8bd2da4341", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-c184e76913d792e3", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-becheran-wildmatch-go-c280892f1f67e7c7", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fatih-color-c3455e6d84c9bb95", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hako-durafmt-c39cca3b5dbc5b2a", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-c4357a402179b1d8", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-v4a-c458fe963dd49d25", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-c4aa28c0bab1c7fe", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-ssooidc-c4ac5da9ee688e44", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-agext-levenshtein-c4c9ac087c52e4ce", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-bubbly-c4e6c0fa4f99cd46", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-c525b351dea6a5f6", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-deitch-magic-c5a9f2645fc4f0a3", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-detectors-gcp-c6b55f2c3502a679", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-xattr-c705d5da8845259d", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-andybalholm-brotli-c7758d1df10ff55e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-struct-converter-c8bbac039e8accfb", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-cd04e01fb0f84b45", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-facebookincubator-nvdtools-cd620062141ee186", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-x-term-cef6cc5c1b739279", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-knqyf263-go-deb-version-cf9dc83015e1b8d7", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-rust-secure-code-go-rustaudit-d0feed12929c7472", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-d24a40277ca9d1ed", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-d2859347e22c5669", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-smithy-go-d2a8ee5a52312db7", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-continuity-d39f3c9e33e66d29", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-d3f8ee4ffbdeb36e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vifraa-gopom-d404aa5e0addb552", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-d45b168fafbcdf09", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-d56c589c31a1a439", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-shopspring-decimal-d589aeec3cde6d5e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-go-homedir-d61dc0ba9cc28254", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-d75f178b5a92f86e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-fifo-d7b8c24758b961df", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-displaywidth-d8f5af40ae3a550f", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sylabs-squashfs-d98850668029f079", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-d9c3066247fb6041", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-xo-terminfo-da5986f729d2b186", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-accept-encoding-da65611700e7c9b2", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-da95a517a7ac61dc", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cel.dev-expr-dab9cabb72d5bb46", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-daf4a7040134301f", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spdx-gordf-db918073cad270bb", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-dbe863e4bdbc004b", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-dd338f46846ec59b", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-ll-dd7e5896e57f9035", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-in-toto-attestation-df73c4980ae9eeda", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-rpmdb-e02b41901dd8e416", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-locker-e08071f0563e71fe", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.etcd.io-bbolt-e1e253dcb13764ff", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-log-e2425233221d9aa2", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-e42947b05a7f7dcd", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jinzhu-copier-e4d4766289ac4d23", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-x-cellbuf-e5b3e7c100e94ba2", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-e6eac968d55b3c0e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbles-e7fd891e0ae77807", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-sqlite-e8e324b6634ac9c0", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-credentials-e9783d2a7e870dd0", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-ea1898b159775c0e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-storage-ea25db81f3081631", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-user-ea8fdfac8a89db68", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-xanzy-ssh-agent-eaded4981ff20a09", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-eca691156e4ed326", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-colorprofile-edc527343984daed", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-tools-ee25b22649e525aa", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-efa2c5969ef840cc", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cast-efbd773a409aeb56", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-userns-f103bfd274996b4e", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sts-f14f84c1c5c64160", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-viper-f27cd3efd3ed4f94", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbletea-f2bf812afd2d5439", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-cpuid-v2-f36972a147f11ffa", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-f80c5e0d70823c1a", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-howett.net-plist-fa4f2002d66d6993", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pandatix-go-cvss-fcf1dbfe08c6d801", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kastenhq-goversion-fdcf81ff411c4c7c", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mikelolasagasti-xz-ff8919a38538eb8d", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-DataDog-zstd-ffa857083cc5fee1", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jinzhu-inflection-ffc6e4b305e0f0a7", "relatedSpdxElement": "SPDXRef-File-usr-bin-grype-b4edb25508e2ca81", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-cel.dev-expr-dab9cabb72d5bb46", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-821e89cdbb290250", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-auth-5c993170322ff726", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-712ee505e63cd3de", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-9f5f86a04390156f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-iam-be69052a12f1cd47", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-monitoring-90d81c2f258a584c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-storage-ea25db81f3081631", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-dario.cat-mergo-7578909db6771690", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-1ab117ccbd042403", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-CycloneDX-cyclonedx-go-1ccec3285c5bc968", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-DataDog-zstd-ffa857083cc5fee1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-detectors-gcp-400ecfe05d06962a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-exporter-metric-914cd3b51ebcdac9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-internal-resourcemapping-4012720b611c6ce2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Intevation-gval-05d53b5456960611", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Intevation-jsonpath-665bf1a8a6d53d1c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-639015613fb8b889", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-cd04e01fb0f84b45", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-3be7c49c318b17ac", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-OneOfOne-xxhash-adafb897d44e4076", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-dd338f46846ec59b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-STARRY-S-zip-4ed21f6385528904", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-3fdcec0e7354ffe4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-acobaugh-osrelease-afa1a167852ad4b8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-adrg-xdg-5b7b28691a85ace2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-agext-levenshtein-c4c9ac087c52e4ce", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-bubbly-c4e6c0fa4f99cd46", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-clio-51ae09fe7fc71630", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-fangs-0c473aaf656c2aa0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-collections-43cab541fc797d9e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-homedir-1acc7dee132a7e74", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-logger-7387d11b9e3d6932", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-lzo-0ae7262b8bdaa7dc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-macholibre-59b06ea00226fcf1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-rpmdb-e02b41901dd8e416", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-struct-converter-c8bbac039e8accfb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-sync-429d8a46f6f27ed7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-version-3c77e50e4b0d8d50", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-grype-730b91f0f78aa990", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-packageurl-go-9ce180049b14c92a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-stereoscope-25accd7e7ce550c9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-99d6607d0428a2bb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-andybalholm-brotli-c7758d1df10ff55e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-729906c6425c12c7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aquasecurity-go-pep440-version-7db1070c60e5e4ca", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aquasecurity-go-version-6b592919e8aabd22", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-araddon-dateparse-1fcabdf9e84a93da", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-d9c3066247fb6041", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-aws-protocol-eventstream-02c09c7ee90be1e5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-config-76462428d9a013e3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-credentials-e9783d2a7e870dd0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-feature-ec2-imds-b86f7bc0ae23ad30", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-configsources-2bf37ef9955582c7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-endpoints-v2-b6265f9b5eff991b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-v4a-c458fe963dd49d25", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-accept-encoding-da65611700e7c9b2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-checksum-38b23488ff17ea67", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-presigned-url-1fe331fd4acea98e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-s3shared-a69c47e526b5d2f9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-s3-c09def8bd2da4341", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-signin-a0107481b8cb9e1c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sso-31cc429250c3d4bb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-ssooidc-c4ac5da9ee688e44", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sts-f14f84c1c5c64160", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-smithy-go-d2a8ee5a52312db7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aymanbagabas-go-osc52-v2-564750f5b1fb9388", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-becheran-wildmatch-go-c280892f1f67e7c7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bgentry-go-netrc-0fea42078665f197", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bitnami-go-version-837d03c9e4e27ecf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-blakesmith-ar-5828026f5da48c2a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v2-a18427aa19091e58", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v4-a162dc5be54f5eb1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bodgit-plumbing-594c467dad20f68c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bodgit-sevenzip-343e945190f7f50b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bodgit-windows-1171f190fdc2fb2f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-c525b351dea6a5f6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbles-e7fd891e0ae77807", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbletea-f2bf812afd2d5439", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-colorprofile-edc527343984daed", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-harmonica-1c9f1265c8c6f415", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-lipgloss-4d053589b69133bd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-x-ansi-8cbf485ea8226790", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-x-cellbuf-e5b3e7c100e94ba2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-x-term-cef6cc5c1b739279", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-clipperhouse-displaywidth-d8f5af40ae3a550f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-3e55a9d13773d7f8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cloudflare-circl-552ebe0b77defbc3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cncf-xds-go-44e4999b6b99f41f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-7922a3d811bae956", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-6e3ae06acc6bf600", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-continuity-d39f3c9e33e66d29", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-errdefs-5f674858265518ea", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-8bd908fd2f703bb2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-fifo-d7b8c24758b961df", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-log-e2425233221d9aa2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-platforms-7e52ac85fd635425", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-plugin-343af9cbe5533124", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-d75f178b5a92f86e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-d2859347e22c5669", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-6c3b178b90746ff7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-deitch-magic-c5a9f2645fc4f0a3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-diskfs-go-diskfs-851de5f5d49841ec", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-distribution-reference-a12b09e551205dfc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-cli-4ee99b27f6d9c593", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-docker-a2d32bfdf9fbc222", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-38d7aae755fe06b4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-go-connections-b477a1fd062aa373", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-go-units-9d751bbcb0abbd2a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dsnet-compress-385a53b14c3137fa", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dustin-go-humanize-2152051a3e485ce9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-elliotchance-phpserialize-b796bb62aafa8b5d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-emirpasic-gods-570013ee36476888", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-envoyproxy-go-control-plane-envoy-19501f2298ba256b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-envoyproxy-protoc-gen-validate-9edbbd1c71cd33bc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-facebookincubator-nvdtools-cd620062141ee186", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fatih-color-c3455e6d84c9bb95", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-felixge-fgprof-5095fba777deaa6a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-adc09a42117fb1ad", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-20c2c401ba07fcf3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gabriel-vasile-mimetype-2307b2f8849a0240", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-github-go-spdx-v2-405e062149c98650", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-glebarez-go-sqlite-7d78191a13754ef3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-glebarez-sqlite-b2580c4d41b57f44", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-git-gcfg-87209058f2438d99", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-git-go-billy-v5-4304949a0ab6da99", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-git-go-git-v5-31272155567d6912", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-d24a40277ca9d1ed", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-logr-682e9d48586e04f9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-stdr-da95a517a7ac61dc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-restruct-restruct-10122f73574216f0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-97bca7fb5b457a25", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-goccy-go-yaml-9964b26a60168c56", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gocsaf-csaf-v3-9048877e8c80ce5a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gogo-protobuf-a9cf386f92835f5e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gohugoio-hashstructure-4f5d86992f7f4e69", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-golang-groupcache-2e395983502626d7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-cmp-60978427708fb05f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-e42947b05a7f7dcd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-licensecheck-6cde3c8b11d05047", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-pprof-93b67eaf85f85586", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-s2a-go-9eb31f26ff53e617", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-uuid-6396de215f422d6f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-b805a6f5281675df", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-b6573c76175f5add", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gookit-color-1dd37bef036a2a62", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gpustack-gguf-parser-go-815bd82aa900d29a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hako-durafmt-c39cca3b5dbc5b2a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-aws-sdk-go-base-v2-a1dad38bc18b2121", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-1d875db53206d26a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-3919b6d7c996f66b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-getter-5d0cbdab125b2831", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-6f1561bf6b96fa60", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-a518b7c4dc7c2161", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-golang-lru-v2-0830468243aa0f2c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-55c740ad726abec6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-henvic-httpretty-bb3bc723ae1d8e92", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-huandu-xstrings-7b51bf0337947eee", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-iancoleman-strcase-8485f32cb554394e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-in-toto-attestation-df73c4980ae9eeda", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jbenet-go-context-02177c275c48792e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jinzhu-copier-e4d4766289ac4d23", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jinzhu-inflection-ffc6e4b305e0f0a7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jinzhu-now-46d21d04ed75fe9b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-json-iterator-go-849b898c5dee5b55", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-kastenhq-goversion-fdcf81ff411c4c7c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-kevinburke-ssh-config-9d4e5c11f65975ee", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-klauspost-compress-9cd2c161ed4f7383", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-klauspost-cpuid-v2-f36972a147f11ffa", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-dbe863e4bdbc004b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-knqyf263-go-apk-version-b05939fcf2b6196c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-knqyf263-go-deb-version-cf9dc83015e1b8d7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-lucasb-eyer-go-colorful-4e29765e1c8e378a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-masahiro331-go-mvn-version-b59537c387187cce", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-efa2c5969ef840cc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-2885c1612f84aeeb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-2d49ea55efd588d3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mgutz-ansi-803688aaf5149e1e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mholt-archives-6ac0930d7638bde9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mikelolasagasti-xz-ff8919a38538eb8d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-minio-minlz-5386fd495c6c2677", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-ea1898b159775c0e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-go-homedir-d61dc0ba9cc28254", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-85f4e102d50724ab", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-4086e54e112438ae", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-9c22df4c1d35a71d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-locker-e08071f0563e71fe", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-moby-api-7d9894353ad2738d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-moby-client-82f8ed5ceb12af1a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-3f0c5e2c98725b03", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-signal-aad7bd6ecdf0ce10", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-user-ea8fdfac8a89db68", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-userns-f103bfd274996b4e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-29cf604dc371b6ff", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-9462749502aa22d7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-muesli-ansi-b059c86e70e64f5d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-muesli-cancelreader-93ab69e4ef0e1c30", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-muesli-termenv-49bd8a42374175ae", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-nix-community-go-nix-10992e6d0052e3e9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-nwaples-rardecode-v2-85c50e99369d0f00", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-olekukonko-cat-6ba8fb0898d6dd18", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-olekukonko-errors-5e072495feb31932", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-olekukonko-ll-dd7e5896e57f9035", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-olekukonko-tablewriter-356c63f97f4fd6e9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-4eb5ad212587f8c9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-8c13777d8eca1d47", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-e6eac968d55b3c0e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-openvex-go-vex-5565059bb56f11f4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-owenrumney-go-sarif-85f8b4ac1c0aeb01", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-package-url-packageurl-go-5009e51e4d89d17e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pandatix-go-cvss-fcf1dbfe08c6d801", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pborman-indent-86eefd4825f2f47a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-c184e76913d792e3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-096c940afa984d56", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-b96f71f998409b56", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-piprate-json-gold-7e2735597a6c1995", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pjbgf-sha1cd-61970a01a83b4f58", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-errors-9a09a111b14c8225", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-profile-209e8e159042f6f3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-xattr-c705d5da8845259d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pquerna-cachecontrol-0fd6b6eaf5b54c0d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-remyoudompheng-bigfft-a7938ac6a8d2438e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-rivo-uniseg-6e232d02dd896744", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-rust-secure-code-go-rustaudit-d0feed12929c7472", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-daf4a7040134301f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-saintfish-chardet-9d8ea0e3753aa793", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-santhosh-tekuri-jsonschema-v6-96cbf3b038db71f1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sassoftware-go-rpmutils-94c7b7363578a827", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-scylladb-go-set-4d352891da965f64", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sergi-go-diff-2adfb12147b60c6b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-shopspring-decimal-d589aeec3cde6d5e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-52ab0fb27f435389", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-skeema-knownhosts-64911e8660667937", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-smallnest-ringbuffer-10a781e91b194892", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sorairolake-lzip-go-7e23ed655aac8c4c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sourcegraph-conc-b610f6093d90f584", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spdx-gordf-db918073cad270bb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spdx-tools-golang-03857efeba63785a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-afero-b2a7e22827201ba8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-cast-efbd773a409aeb56", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-cobra-d3f8ee4ffbdeb36e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-pflag-b03a3ffaa1d8f799", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-viper-f27cd3efd3ed4f94", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spiffe-go-spiffe-v2-835334c9e210045f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-subosito-gotenv-57eaa019d15f9c90", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-84e4460d3b52c566", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sylabs-squashfs-d98850668029f079", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tailscale-hujson-0624084c7c037b92", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-therootcompany-xz-4c3e21dece5a3d4d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-8d9022dafc358585", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vbatts-go-mtree-087fb1b66d450edf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vifraa-gopom-d404aa5e0addb552", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-wagoodman-go-partybus-17a9db0e0d6075bf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-wagoodman-go-presenter-168f8e59cf1dd460", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-wagoodman-go-progress-a60ac791901a489e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-xanzy-ssh-agent-eaded4981ff20a09", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-xi2-xz-b47f284caf2ee05e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-xo-terminfo-da5986f729d2b186", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-38133ac19716a5be", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-zyedidia-generic-71339daa07d5b16a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.etcd.io-bbolt-e1e253dcb13764ff", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-4261642149e6e223", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-detectors-gcp-c6b55f2c3502a679", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-231923fe32d1fad9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-98a867f7f9afb728", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-8608c3e00128cb9c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-d56c589c31a1a439", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-3fa2809212168442", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-eca691156e4ed326", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-101e2c578ca9d1ed", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-92a51c05ef2fe0b7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go4.org-4ed8aa31b900d501", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-crypto-4647097880112783", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-exp-afd186f203b2c920", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-mod-5a5a281bf6ed373f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-net-84b13f8b8fabc678", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-oauth2-ace2f37ad59aca35", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sync-9e58cceec8176db0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sys-d45b168fafbcdf09", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-term-bdd9a3bb99d412dd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-text-29c9568dc1219a6b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-time-325a6cda1d9f9762", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-tools-ee25b22649e525aa", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-xerrors-b426ddd369b78004", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-api-2c7803bf8d41d2ed", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-c4aa28c0bab1c7fe", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-c4357a402179b1d8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-9e455a5874229c0e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-grpc-a0ea6b899ab38a0c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-protobuf-f80c5e0d70823c1a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-gopkg.in-warnings.v0-97ac151894b5c641", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-8d7166932605a8fa", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-gorm.io-gorm-51b148e9577e7fa3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-rpm-grype-acff62daee366b39", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-howett.net-plist-fa4f2002d66d6993", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-modernc.org-libc-8b07475c1530d62c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-modernc.org-mathutil-9f243161fa75f8b9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-modernc.org-memory-311d693ee04928eb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-modernc.org-sqlite-e8e324b6634ac9c0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-stdlib-765c93b72a178fff", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-x86-64-grype", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-grype-0.119.0-0.2.hum1.x86-64"}, {"spdxElementId": "SPDXRef-Package-rpm-grype-78208d9a57e7909e", "relatedSpdxElement": "SPDXRef-File-...grype-0.119.0-0.2.hum1.x86-64.debug-30a11f9c3ce310d3", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-grype-debuginfo-0.119.0-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-rpm-grype-78208d9a57e7909e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-grype-debuginfo-0.119.0-0.2.hum1.x86-64", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-x86-64-grype-debuginfo", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-grype-debuginfo-0.119.0-0.2.hum1.x86-64"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-grype-debugsource-0.119.0-0.2.hum1.x86-64", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-x86-64-grype-debugsource", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-grype-debugsource-0.119.0-0.2.hum1.x86-64"}], "documentDescribes": ["SPDXRef-SRPM", "SPDXRef-aarch64-grype", "SPDXRef-s390x-grype", "SPDXRef-x86-64-grype", "SPDXRef-aarch64-grype-debuginfo", "SPDXRef-s390x-grype-debuginfo", "SPDXRef-x86-64-grype-debuginfo", "SPDXRef-aarch64-grype-debugsource", "SPDXRef-s390x-grype-debugsource", "SPDXRef-x86-64-grype-debugsource"]}