{"spdxVersion": "SPDX-2.3", "dataLicense": "CC0-1.0", "SPDXID": "SPDXRef-DOCUMENT", "creationInfo": {"created": "2026-10-01T15:53:09Z", "creators": ["Tool: Konflux", "Organization: Fedora"]}, "name": "oauth2-proxy-7.15.5-0.1.hum1", "documentNamespace": "https://fedoraproject.org/oauth2-proxy-7.15.5-0.1.hum1.spdx.json", "packages": [{"SPDXID": "SPDXRef-SRPM", "name": "oauth2-proxy", "versionInfo": "7.15.5-0.1.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "oauth2-proxy-7.15.5-0.1.hum1.src.rpm", "licenseDeclared": "Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND BSL-1.0 AND ISC AND MIT AND Unlicense", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/oauth2-proxy@7.15.5-0.1.hum1?arch=src"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "c35350ff1f539f3d9bfe6f10712f5418740ea96291e3409d8496af0f89bde7f2"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: b'\\x8c#\\x14+<\\xb2\\x7f\\xa9e\\xe8E\\xd6\\xf3\\xf1Z\\xde'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sha256header: 94ddbd8e8e010008b864478848f9245d70317e0b53bdfc55d7f2d0a102af16a5"}]}, {"SPDXID": "SPDXRef-aarch64-oauth2-proxy", "name": "oauth2-proxy", "versionInfo": "7.15.5-0.1.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "oauth2-proxy-7.15.5-0.1.hum1.aarch64.rpm", "licenseDeclared": "Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND BSL-1.0 AND ISC AND MIT AND Unlicense", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/oauth2-proxy@7.15.5-0.1.hum1?arch=aarch64"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "608f58de6b8e7b69762340b22aa87c886eec444bece8db66f6acf8ae4b435593"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: b'Q\\xbd\\xb0[\\xd6`\\x1eg\\xefI?C$YE\\x9d'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sha256header: e61714d0b4b5fcde131f085a503282814368458491293346c4b859493f1f0fad"}]}, {"SPDXID": "SPDXRef-x86-64-oauth2-proxy", "name": "oauth2-proxy", "versionInfo": "7.15.5-0.1.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "oauth2-proxy-7.15.5-0.1.hum1.x86_64.rpm", "licenseDeclared": "Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND BSL-1.0 AND ISC AND MIT AND Unlicense", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/oauth2-proxy@7.15.5-0.1.hum1?arch=x86_64"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "7747ccf582019c1ee2acbc593966baa6832a7a587589bcd6922b2653881c9e2d"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: b'np\\x05\\xbe\\xa6r\\xaa{G\\xce@ /_\\xf7\\x99'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sha256header: 9db440aebce138d8442270f2d9192fa4681383dc6ddff146ba488f5c5a70810b"}]}, {"SPDXID": "SPDXRef-aarch64-oauth2-proxy-debuginfo", "name": "oauth2-proxy-debuginfo", "versionInfo": "7.15.5-0.1.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "oauth2-proxy-debuginfo-7.15.5-0.1.hum1.aarch64.rpm", "licenseDeclared": "Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND BSL-1.0 AND ISC AND MIT AND Unlicense", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/oauth2-proxy-debuginfo@7.15.5-0.1.hum1?arch=aarch64"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "8d4f3218417ae7431d79a2fbf7878c2990d6648db32adfc3a82e7cc54eb329d5"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: b'\\xb8\\xcd\\xeb\\x1d\\xe3>7\\xe9\\xe8n\\x1e\"\\xbc\\x19x\\x1d'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sha256header: 1e5be55c5279ec2f8132ac94047841693cf753ee6ee203b2938537191a0a5e27"}]}, {"SPDXID": "SPDXRef-x86-64-oauth2-proxy-debuginfo", "name": "oauth2-proxy-debuginfo", "versionInfo": "7.15.5-0.1.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "oauth2-proxy-debuginfo-7.15.5-0.1.hum1.x86_64.rpm", "licenseDeclared": "Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND BSL-1.0 AND ISC AND MIT AND Unlicense", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/oauth2-proxy-debuginfo@7.15.5-0.1.hum1?arch=x86_64"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "652cc28d8d7adbd98360519ebcb11204028f1ce4a97f813106a668726dea0b64"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: b'\\x0b\\xabv\\xe1l\\x9c\\xd0\\x96\\x11l;\\xae.\\xc1\\x1br'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sha256header: 078d9a8742618b6740098aa50dade3691e83cc1f3845dcb2a39cc54ff119faee"}]}, {"SPDXID": "SPDXRef-aarch64-oauth2-proxy-debugsource", "name": "oauth2-proxy-debugsource", "versionInfo": "7.15.5-0.1.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "oauth2-proxy-debugsource-7.15.5-0.1.hum1.aarch64.rpm", "licenseDeclared": "Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND BSL-1.0 AND ISC AND MIT AND Unlicense", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/oauth2-proxy-debugsource@7.15.5-0.1.hum1?arch=aarch64"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "6b3d5b98c6a300cf7aafdcb6985739e9c8b064f7608f7986b36176a23031a8cc"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: b'\\xbc\\x12\\xf5\\xfaB\\xda\\x1b\\x16!i\\xf4\\xd6\\xec\\x8dC\\xf2'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sha256header: d8ef434e200ad4862d8461c158e7851c3c38eec5a3ffbf9548cd1a7f545b80e5"}]}, {"SPDXID": "SPDXRef-x86-64-oauth2-proxy-debugsource", "name": "oauth2-proxy-debugsource", "versionInfo": "7.15.5-0.1.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "oauth2-proxy-debugsource-7.15.5-0.1.hum1.x86_64.rpm", "licenseDeclared": "Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND BSL-1.0 AND ISC AND MIT AND Unlicense", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/oauth2-proxy-debugsource@7.15.5-0.1.hum1?arch=x86_64"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "271c21b7058f9dd5fb91a8b8c65a0c3723727abae7f6a93d34210ce4f4822b83"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: b'G\\x91\\xa8\\x82\\x17\\xb4\\x11\\xe6\\x99\\xe2\\t\\xe3\\xe0\\x92\\x84\\xf8'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sha256header: daeda893ab7ce5f012cb7be8d4d41c8ba7680c971924f2e6fba0c9c5376854ad"}]}, {"SPDXID": "SPDXRef-Source0", "name": "oauth2-proxy", "versionInfo": "7.15.5", "packageFileName": "oauth2-proxy-7.15.5.tar.gz", "downloadLocation": "https://src.fedoraproject.org/repo/pkgs/rpms/oauth2-proxy/oauth2-proxy-7.15.5.tar.gz/sha512/f28e6335adcfd7da8fbb509ee65bef75ed8be7bda172c568827128ea4ff38e5e8d56325b619da6034dba750b12905c3fc12c7a348a100914c5690825ea0e44ed/oauth2-proxy-7.15.5.tar.gz", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "11ec93a75f1ac82a618e1e6aebb67068e55bcca353a54df8bd970c977c5f59b9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/oauth2-proxy@7.15.5?download_url=https://src.fedoraproject.org/repo/pkgs/rpms/oauth2-proxy/oauth2-proxy-7.15.5.tar.gz/sha512/f28e6335adcfd7da8fbb509ee65bef75ed8be7bda172c568827128ea4ff38e5e8d56325b619da6034dba750b12905c3fc12c7a348a100914c5690825ea0e44ed/oauth2-proxy-7.15.5.tar.gz&checksum=sha512:f28e6335adcfd7da8fbb509ee65bef75ed8be7bda172c568827128ea4ff38e5e8d56325b619da6034dba750b12905c3fc12c7a348a100914c5690825ea0e44ed"}]}, {"SPDXID": "SPDXRef-Source0-origin", "name": "oauth2-proxy", "versionInfo": "7.15.5", "downloadLocation": "https://github.com/oauth2-proxy/oauth2-proxy/archive/v7.15.5/oauth2-proxy-7.15.5.tar.gz", "packageFileName": "oauth2-proxy-7.15.5.tar.gz", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "11ec93a75f1ac82a618e1e6aebb67068e55bcca353a54df8bd970c977c5f59b9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/oauth2-proxy@7.15.5?download_url=https://github.com/oauth2-proxy/oauth2-proxy/archive/v7.15.5/oauth2-proxy-7.15.5.tar.gz&checksum=sha256:11ec93a75f1ac82a618e1e6aebb67068e55bcca353a54df8bd970c977c5f59b9"}]}, {"SPDXID": "SPDXRef-Source1", "name": "oauth2-proxy-7.15.5", "versionInfo": "vendor", "packageFileName": "oauth2-proxy-7.15.5-vendor.tar.bz2", "downloadLocation": "https://src.fedoraproject.org/repo/pkgs/rpms/oauth2-proxy/oauth2-proxy-7.15.5-vendor.tar.bz2/sha512/db82d9d6945f6e733f15a55270fe18c845bf4c54b6a49419a07e8a5608318cdf7d667c57a7f4de970bb1cc92ecbe7139dcb118485fa3e84b4f7a2e85037936cd/oauth2-proxy-7.15.5-vendor.tar.bz2", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "94742ae08df91470cd0e956bb968a877d1d08c20b35e47d3200bcfd056313bdd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/oauth2-proxy-7.15.5@vendor?download_url=https://src.fedoraproject.org/repo/pkgs/rpms/oauth2-proxy/oauth2-proxy-7.15.5-vendor.tar.bz2/sha512/db82d9d6945f6e733f15a55270fe18c845bf4c54b6a49419a07e8a5608318cdf7d667c57a7f4de970bb1cc92ecbe7139dcb118485fa3e84b4f7a2e85037936cd/oauth2-proxy-7.15.5-vendor.tar.bz2&checksum=sha512:db82d9d6945f6e733f15a55270fe18c845bf4c54b6a49419a07e8a5608318cdf7d667c57a7f4de970bb1cc92ecbe7139dcb118485fa3e84b4f7a2e85037936cd"}]}, {"SPDXID": "SPDXRef-Source2", "name": "go-vendor", "versionInfo": "tools.toml", "packageFileName": "go-vendor-tools.toml", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "043d15dc3079e62af5234527730d36a5f942941ecd2e837b46d5bef33930e383"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/go-vendor@tools.toml"}]}, {"SPDXID": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "name": "oauth2-proxy-buildroot-aarch64", "versionInfo": "da52d037", "downloadLocation": "NOASSERTION", "filesAnalyzed": false}, {"SPDXID": "SPDXRef-Buildroot-Package-R-srpm-macros-aarch64", "name": "R-srpm-macros", "versionInfo": "1.3.7-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/R-srpm-macros-1.3.7-3.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: af95299e83e51b62a40fa7a42d357077"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/R-srpm-macros@1.3.7-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-add-determinism-aarch64", "name": "add-determinism", "versionInfo": "0.7.3-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/a/add-determinism-0.7.3-3.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND MIT AND Unicode-DFS-2016 AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 OR MIT) AND (Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND (MIT OR Zlib OR Apache-2.0) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: d9f312587e782399c5594fca818bdf4a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/add-determinism@0.7.3-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-alternatives-aarch64", "name": "alternatives", "versionInfo": "1.33-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/a/alternatives-1.33-5.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: e4ab56446a14839dd206920bb41d00b3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/alternatives@1.33-5.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-annobin-docs-aarch64", "name": "annobin-docs", "versionInfo": "13.32-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/a/annobin-docs-13.32-1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND GFDL-1.3-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: f7b82d32f1e08c859e3b8de4668a28fc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/annobin-docs@13.32-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-annobin-plugin-gcc-aarch64", "name": "annobin-plugin-gcc", "versionInfo": "13.32-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/a/annobin-plugin-gcc-13.32-1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND GFDL-1.3-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: e2bbb8edbb56b704ce72dd1df99c7943"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/annobin-plugin-gcc@13.32-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ansible-srpm-macros-aarch64", "name": "ansible-srpm-macros", "versionInfo": "1-22.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/a/ansible-srpm-macros-1-22.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 6343ff368e5236625d015dbc91e70769"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ansible-srpm-macros@1-22.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-askalono-cli-aarch64", "name": "askalono-cli", "versionInfo": "0.5.0-4.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/aarch64/os/Packages/a/askalono-cli-0.5.0-4.fc44.aarch64.rpm", "licenseDeclared": "Apache-2.0 AND CC0-1.0 AND MIT AND Unicode-DFS-2016 AND (Apache-2.0 OR BSL-1.0) AND (Apache-2.0 OR MIT) AND (MIT OR Apache-2.0 OR Zlib) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: eae8d6430b2e5c31170f3b2d7f1f51bb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/askalono-cli@0.5.0-4.fc44?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-audit-libs-aarch64", "name": "audit-libs", "versionInfo": "4.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/a/audit-libs-4.2.1-2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 5fcbd6dfeb5c21d3f940c607eff1840b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/audit-libs@4.2.1-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bash-aarch64", "name": "bash", "versionInfo": "5.3.15-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/b/bash-5.3.15-2.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 6d0b1dcae662059f95d77fb7a4432e09"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bash@5.3.15-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-binutils-aarch64", "name": "binutils", "versionInfo": "2.46.1-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/b/binutils-2.46.1-1.2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-3.0-or-later WITH Bison-exception-2.2) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND BSD-3-Clause AND GFDL-1.3-or-later AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 9d650b254a6b2aafc48494b30fd47b7c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/binutils@2.46.1-1.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-build-reproducibility-srpm-macros-aarch64", "name": "build-reproducibility-srpm-macros", "versionInfo": "0.7.3-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/b/build-reproducibility-srpm-macros-0.7.3-3.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: b7d13395d88324c0009658f89c21ec4d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/build-reproducibility-srpm-macros@0.7.3-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bzip2-libs-aarch64", "name": "bzip2-libs", "versionInfo": "1.0.8-24.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/b/bzip2-libs-1.0.8-24.hum1.aarch64.rpm", "licenseDeclared": "BSD-4-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 7fd1c630b28fc944724af0cb3fa6f317"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bzip2-libs@1.0.8-24.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bzip2-aarch64", "name": "bzip2", "versionInfo": "1.0.8-24.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/b/bzip2-1.0.8-24.hum1.aarch64.rpm", "licenseDeclared": "BSD-4-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 39a87169215d85cf3a6b40e1b271f4ce"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bzip2@1.0.8-24.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ca-certificates-aarch64", "name": "ca-certificates", "versionInfo": "2026.2.90_v9.0.317-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/ca-certificates-2026.2.90_v9.0.317-1.hum1.noarch.rpm", "licenseDeclared": "MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 7898dfbff66ba7ff7ab734e7295a7073"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ca-certificates@2026.2.90_v9.0.317-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cmake-srpm-macros-aarch64", "name": "cmake-srpm-macros", "versionInfo": "4.3.0-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/cmake-srpm-macros-4.3.0-5.1.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND MIT-open-group AND Zlib AND Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: f4f531a89be4477f0d05fc8fbf71ce81"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cmake-srpm-macros@4.3.0-5.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-coreutils-common-aarch64", "name": "coreutils-common", "versionInfo": "9.12-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/coreutils-common-9.12-1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-no-invariants-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 620829638731baecedb0e08c23b564c2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/coreutils-common@9.12-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-coreutils-aarch64", "name": "coreutils", "versionInfo": "9.12-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/coreutils-9.12-1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-no-invariants-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 5d8638f475a327f99fc1efc1242fe6ef"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/coreutils@9.12-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cpio-aarch64", "name": "cpio", "versionInfo": "2.15-10.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/cpio-2.15-10.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 07b3f2016a23bdb65e5d7569d8eb6579"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cpio@2.15-10.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cpp-aarch64", "name": "cpp", "versionInfo": "16.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/cpp-16.2.1-2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 9d95edb60a2529884d7bd4ab48daa023"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cpp@16.2.1-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-crypto-policies-config-default-aarch64", "name": "crypto-policies-config-default", "versionInfo": "20260812-1.git359ab16.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/crypto-policies-config-default-20260812-1.git359ab16.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 9691d62eb992aa2ad5a5756c54e89543"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/crypto-policies-config-default@20260812-1.git359ab16.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-crypto-policies-aarch64", "name": "crypto-policies", "versionInfo": "20260812-1.git359ab16.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/crypto-policies-20260812-1.git359ab16.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: b90f2e7121797f48ce72da9beb5c9abe"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/crypto-policies@20260812-1.git359ab16.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-curl-aarch64", "name": "curl", "versionInfo": "8.22.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/curl-8.22.0-1.hum1.aarch64.rpm", "licenseDeclared": "curl", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 4ffd0d40b6a7a09dd1a27a4e902f3c7a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/curl@8.22.0-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cyrus-sasl-lib-aarch64", "name": "cyrus-sasl-lib", "versionInfo": "2.1.28-37.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/cyrus-sasl-lib-2.1.28-37.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-Attribution-HPND-disclaimer", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: b2d19a64f1d90955bbb1d05a2be205a0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cyrus-sasl-lib@2.1.28-37.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-debugedit-aarch64", "name": "debugedit", "versionInfo": "5.3-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/d/debugedit-5.3-3.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 40b46b2f221c89c645674502b8647f5c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/debugedit@5.3-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-diffutils-aarch64", "name": "diffutils", "versionInfo": "3.12-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/d/diffutils-3.12-6.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 3e8092a3846ac4f1445fd7f52255b426"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/diffutils@3.12-6.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-dwz-aarch64", "name": "dwz", "versionInfo": "0.17-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/d/dwz-0.17-3.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND GPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 445c73aa30d8146e1f426e64f5354e1e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/dwz@0.17-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ed-aarch64", "name": "ed", "versionInfo": "1.22.6-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/ed-1.22.6-1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-only AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 443b9d1a7a55635cb2f68e241fc9bada"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ed@1.22.6-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-efi-srpm-macros-aarch64", "name": "efi-srpm-macros", "versionInfo": "6-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/efi-srpm-macros-6-9.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: cba49c2554beb37df9cc6bb744737e2b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/efi-srpm-macros@6-9.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-debuginfod-client-aarch64", "name": "elfutils-debuginfod-client", "versionInfo": "0.196-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/elfutils-debuginfod-client-0.196-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-2.0-or-later OR LGPL-3.0-or-later)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: cfc2bdba19927cc543883cc3d57d37f8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-debuginfod-client@0.196-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-libelf-aarch64", "name": "elfutils-libelf", "versionInfo": "0.196-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/elfutils-libelf-0.196-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 6de1c98d7c9a7ca307f85ef993d51f32"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-libelf@0.196-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-libs-aarch64", "name": "elfutils-libs", "versionInfo": "0.196-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/elfutils-libs-0.196-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 4ad304ad3a6883f5f3f727beb95b9f59"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-libs@0.196-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-aarch64", "name": "elfutils", "versionInfo": "0.196-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/elfutils-0.196-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-2.0-or-later OR LGPL-3.0-or-later) AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 9cb367b3921cc31cf241da97ae144d05"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils@0.196-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-erlang-srpm-macros-aarch64", "name": "erlang-srpm-macros", "versionInfo": "0.3.11-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/erlang-srpm-macros-0.3.11-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 063020bc2b254fec865c06f313930cec"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/erlang-srpm-macros@0.3.11-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-expat-aarch64", "name": "expat", "versionInfo": "2.8.4-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/expat-2.8.4-0.2.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 309ecb0b2227bf9883aff6252bdf4216"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/expat@2.8.4-0.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-file-libs-aarch64", "name": "file-libs", "versionInfo": "5.48-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/file-libs-5.48-3.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause-Darwin AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: b393354b405cc60d1c6adae387c6a49d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/file-libs@5.48-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-filesystem-srpm-macros-aarch64", "name": "filesystem-srpm-macros", "versionInfo": "3.18-59.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/filesystem-srpm-macros-3.18-59.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 70275b951d6f88ee50376b509b62df87"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/filesystem-srpm-macros@3.18-59.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-filesystem-aarch64", "name": "filesystem", "versionInfo": "3.18-59.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/filesystem-3.18-59.hum1.aarch64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 431320663cae44cfc7d899b58f0c3ef7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/filesystem@3.18-59.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-file-aarch64", "name": "file", "versionInfo": "5.48-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/file-5.48-3.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause-Darwin AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: c815d32949a275c0c3bf2edc0357aec5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/file@5.48-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-findutils-aarch64", "name": "findutils", "versionInfo": "1:4.11.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/findutils-4.11.0-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 22d3b0f3b1038e87776ed0fee3c0b038"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/findutils@4.11.0-1.1.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-fonts-srpm-macros-aarch64", "name": "fonts-srpm-macros", "versionInfo": "1:5.0.0-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/fonts-srpm-macros-5.0.0-4.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 72e451571f24737949a256d091508d0c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/fonts-srpm-macros@5.0.0-4.hum1?arch=noarch&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-forge-srpm-macros-aarch64", "name": "forge-srpm-macros", "versionInfo": "0.4.0-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/forge-srpm-macros-0.4.0-5.hum1.noarch.rpm", "licenseDeclared": "GPL-1.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: bfbed65969ec708556df3750591a377d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/forge-srpm-macros@0.4.0-5.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-fpc-srpm-macros-aarch64", "name": "fpc-srpm-macros", "versionInfo": "1.3-17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/fpc-srpm-macros-1.3-17.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 1f7e4cb902ccc37236f8d34ff8873cf2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/fpc-srpm-macros@1.3-17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gap-srpm-macros-aarch64", "name": "gap-srpm-macros", "versionInfo": "2-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gap-srpm-macros-2-3.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 70e3423696085d13791fefc0be7cdf15"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gap-srpm-macros@2-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gawk-aarch64", "name": "gawk", "versionInfo": "5.4.1-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gawk-5.4.1-1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: d586bc40c1d6132f2694072a5718a1f3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gawk@5.4.1-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gcc-plugin-annobin-aarch64", "name": "gcc-plugin-annobin", "versionInfo": "16.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gcc-plugin-annobin-16.2.1-2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 84ae034d7fab2683e5bd043ba6669abc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gcc-plugin-annobin@16.2.1-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gcc-aarch64", "name": "gcc", "versionInfo": "16.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gcc-16.2.1-2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 6fbe7ebd5f02fae40ca4eb48398b11cb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gcc@16.2.1-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gdb-minimal-aarch64", "name": "gdb-minimal", "versionInfo": "17.2-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gdb-minimal-17.2-6.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND BSD-3-Clause AND FSFAP AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain AND GFDL-1.3-or-later AND LGPL-2.0-or-later WITH GCC-exception-2.0 AND GPL-3.0-or-later WITH GCC-exception-3.1 AND GPL-2.0-or-later WITH GNU-compiler-exception AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 8b52c99ad39fb4b6c9bc68140320c43f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gdb-minimal@17.2-6.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gdbm-libs-aarch64", "name": "gdbm-libs", "versionInfo": "1:1.23-12.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gdbm-libs-1.23-12.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: c145b4ceb3531f48937797cb9ea3f3aa"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gdbm-libs@1.23-12.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ghc-srpm-macros-aarch64", "name": "ghc-srpm-macros", "versionInfo": "1.10-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/ghc-srpm-macros-1.10-2.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: c59363c566e4f370953f5f4b048e594e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ghc-srpm-macros@1.10-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-common-aarch64", "name": "glibc-common", "versionInfo": "2.43-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/glibc-common-2.43-9.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: fcf83f0aa121605ea8402d263679e3ec"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-common@2.43-9.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-devel-aarch64", "name": "glibc-devel", "versionInfo": "2.43-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/glibc-devel-2.43-9.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: f6755a750cb511ed93dee97987dd66be"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-devel@2.43-9.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-gconv-extra-aarch64", "name": "glibc-gconv-extra", "versionInfo": "2.43-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/glibc-gconv-extra-2.43-9.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: f417e74ad381d1bbff7c45b4df2ecc0f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-gconv-extra@2.43-9.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-minimal-langpack-aarch64", "name": "glibc-minimal-langpack", "versionInfo": "2.43-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/glibc-minimal-langpack-2.43-9.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 4350511feadf972cd0f05d744b28728c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-minimal-langpack@2.43-9.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-aarch64", "name": "glibc", "versionInfo": "2.43-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/glibc-2.43-9.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: a2b2af4c9e80e563c5ffc4b8b93fc70a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc@2.43-9.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gmp-aarch64", "name": "gmp", "versionInfo": "1:6.3.0-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gmp-6.3.0-6.hum1.aarch64.rpm", "licenseDeclared": "(LGPL-3.0-or-later OR GPL-2.0-or-later OR (LGPL-3.0-or-later AND GPL-2.0-or-later)) AND GFDL-1.3-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: f8861e8a15f175644835f0fda3b16f1f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gmp@6.3.0-6.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnat-srpm-macros-aarch64", "name": "gnat-srpm-macros", "versionInfo": "7-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnat-srpm-macros-7-3.hum1.noarch.rpm", "licenseDeclared": "FSFAP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 66efb6ab04e5e1a84478a688e2f149a3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnat-srpm-macros@7-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnome-srpm-macros-aarch64", "name": "gnome-srpm-macros", "versionInfo": "1.0-1.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/updates/44/Everything/aarch64/Packages/g/gnome-srpm-macros-1.0-1.fc44.noarch.rpm", "licenseDeclared": "Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 2bbaa6afcb861d76b0036e4b5bf9b3be"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnome-srpm-macros@1.0-1.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnulib-l10n-aarch64", "name": "gnulib-l10n", "versionInfo": "20241231-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnulib-l10n-20241231-4.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 8299247dcb1565848a3336c23caa59b6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnulib-l10n@20241231-4.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-dirmngr-aarch64", "name": "gnupg2-dirmngr", "versionInfo": "2.4.9-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnupg2-dirmngr-2.4.9-18.hum1.aarch64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: b5d12c26791ad8e0eab605f328a8be45"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-dirmngr@2.4.9-18.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-gpg-agent-aarch64", "name": "gnupg2-gpg-agent", "versionInfo": "2.4.9-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnupg2-gpg-agent-2.4.9-18.hum1.aarch64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 49437a74b28a51ffc405de286c72ecd6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-gpg-agent@2.4.9-18.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-gpgconf-aarch64", "name": "gnupg2-gpgconf", "versionInfo": "2.4.9-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnupg2-gpgconf-2.4.9-18.hum1.aarch64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 95274be421bbcb8e35926be89a8e13f3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-gpgconf@2.4.9-18.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-keyboxd-aarch64", "name": "gnupg2-keyboxd", "versionInfo": "2.4.9-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnupg2-keyboxd-2.4.9-18.hum1.aarch64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: a7334bd8566c4732f6e1c07e1471345e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-keyboxd@2.4.9-18.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-verify-aarch64", "name": "gnupg2-verify", "versionInfo": "2.4.9-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnupg2-verify-2.4.9-18.hum1.aarch64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: d7242a18b8b1f59935ad16bc77cdcab3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-verify@2.4.9-18.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-aarch64", "name": "gnupg2", "versionInfo": "2.4.9-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnupg2-2.4.9-18.hum1.aarch64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 6410ea1db8191d13c8f5a4cabc8a4673"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2@2.4.9-18.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnutls-aarch64", "name": "gnutls", "versionInfo": "3.8.13-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnutls-3.8.13-5.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: f83710d9d6806bb5838729856f659a68"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnutls@3.8.13-5.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-filesystem-aarch64", "name": "go-filesystem", "versionInfo": "3.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/go-filesystem-3.8.0-3.hum1.aarch64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 21c344b50ec791073eecf2f78130e36d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-filesystem@3.8.0-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-rpm-macros-aarch64", "name": "go-rpm-macros", "versionInfo": "3.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/go-rpm-macros-3.8.0-3.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 1cca57be53ff370d84ba6f32712ca1e2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-rpm-macros@3.8.0-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-srpm-macros-aarch64", "name": "go-srpm-macros", "versionInfo": "3.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/go-srpm-macros-3.8.0-3.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 58fd7d8eb056ce7d09e3ba375de1effc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-srpm-macros@3.8.0-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-vendor-tools-aarch64", "name": "go-vendor-tools", "versionInfo": "0.12.0-1.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/updates/44/Everything/aarch64/Packages/g/go-vendor-tools-0.12.0-1.fc44.noarch.rpm", "licenseDeclared": "MIT AND BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 7c4ed6389413dbed713121b1168f24da"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-vendor-tools@0.12.0-1.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-bin-aarch64", "name": "golang1.27-bin", "versionInfo": "1.27.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/golang1.27-bin-1.27.1-2.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: b8dd7c037a6c79a628d6cfdc9117ec7c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27-bin@1.27.1-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-src-aarch64", "name": "golang1.27-src", "versionInfo": "1.27.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/golang1.27-src-1.27.1-2.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 836c68a2d4a36e53e33ae1587ba7e23d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27-src@1.27.1-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-aarch64", "name": "golang1.27", "versionInfo": "1.27.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/golang1.27-1.27.1-2.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 48240e161bd7eddd8e6a3ec1531824b9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27@1.27.1-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golist-aarch64", "name": "golist", "versionInfo": "0.11.0-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/golist-0.11.0-2.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause AND BSD-3-Clause AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: b92a6bbb82038b2e3078acfb1c3f4220"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golist@0.11.0-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gpgverify-aarch64", "name": "gpgverify", "versionInfo": "2.2-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gpgverify-2.2-5.hum1.noarch.rpm", "licenseDeclared": "Boehm-GC", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 9637bdca60814388d4c5b144d923e6d4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gpgverify@2.2-5.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-grep-aarch64", "name": "grep", "versionInfo": "3.12-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/grep-3.12-4.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 1ac4ff9c9efdc89891ac8af36379267b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/grep@3.12-4.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gzip-aarch64", "name": "gzip", "versionInfo": "1.14-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gzip-1.14-4.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 60b31a6471b6943af38248e51ca60f91"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gzip@1.14-4.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-gpg-keys-aarch64", "name": "hummingbird-gpg-keys", "versionInfo": "20251124-1.16.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/h/hummingbird-gpg-keys-20251124-1.16.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 293719e921051d2c474acc222cc0955d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-gpg-keys@20251124-1.16.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-release-aarch64", "name": "hummingbird-release", "versionInfo": "20251124-1.16.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/h/hummingbird-release-20251124-1.16.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 4443e83eba871e4e77290c97065ffa02"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-release@20251124-1.16.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-repos-aarch64", "name": "hummingbird-repos", "versionInfo": "20251124-1.16.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/h/hummingbird-repos-20251124-1.16.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: c889167c7b3cca62bb596d3cfbd63b6d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-repos@20251124-1.16.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ima-evm-utils-libs-aarch64", "name": "ima-evm-utils-libs", "versionInfo": "1.6.2-12.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/i/ima-evm-utils-libs-1.6.2-12.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: af22bce02abb1a5baffcfd830def648f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ima-evm-utils-libs@1.6.2-12.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-info-aarch64", "name": "info", "versionInfo": "7.2-9.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/aarch64/os/Packages/i/info-7.2-9.fc44.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: ff57ae9e674b526c3d40eebc6a75d7f1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/info@7.2-9.fc44?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-jansson-aarch64", "name": "jansson", "versionInfo": "2.14-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/j/jansson-2.14-5.hum1.aarch64.rpm", "licenseDeclared": "MIT AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: db418e1b673911b66cc09a248ffa0c64"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/jansson@2.14-5.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-java-srpm-macros-aarch64", "name": "java-srpm-macros", "versionInfo": "1-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/j/java-srpm-macros-1-9.hum1.noarch.rpm", "licenseDeclared": "MIT-0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 367fafb59cbd6a02034ba8bafdafe9c9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/java-srpm-macros@1-9.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-json-c-aarch64", "name": "json-c", "versionInfo": "0.18-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/j/json-c-0.18-9.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 1690c6dc840c00abcb160ef938d496ba"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/json-c@0.18-9.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-kernel-headers-aarch64", "name": "kernel-headers", "versionInfo": "7.2.0-61.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/k/kernel-headers-7.2.0-61.hum1.aarch64.rpm", "licenseDeclared": "((GPL-2.0-only WITH Linux-syscall-note) OR BSD-2-Clause) AND ((GPL-2.0-only WITH Linux-syscall-note) OR BSD-3-Clause) AND ((GPL-2.0-only WITH Linux-syscall-note) OR CDDL-1.0) AND ((GPL-2.0-only WITH Linux-syscall-note) OR Linux-OpenIB) AND ((GPL-2.0-only WITH Linux-syscall-note) OR MIT) AND ((GPL-2.0-or-later WITH Linux-syscall-note) OR BSD-3-Clause) AND ((GPL-2.0-or-later WITH Linux-syscall-note) OR MIT) AND BSD-3-Clause AND (GPL-1.0-or-later WITH Linux-syscall-note) AND GPL-2.0-only AND (GPL-2.0-only WITH Linux-syscall-note) AND (GPL-2.0-or-later WITH Linux-syscall-note) AND (LGPL-2.0-or-later WITH Linux-syscall-note) AND (LGPL-2.1-only WITH Linux-syscall-note) AND (LGPL-2.1-or-later WITH Linux-syscall-note) AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 2d08f0e67b9f8c09d4facbf792b10629"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/kernel-headers@7.2.0-61.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-kernel-srpm-macros-aarch64", "name": "kernel-srpm-macros", "versionInfo": "1.0-30.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/k/kernel-srpm-macros-1.0-30.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: d6fe851b8eed59b0b3ed90411974a3f1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/kernel-srpm-macros@1.0-30.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-keyutils-libs-aarch64", "name": "keyutils-libs", "versionInfo": "1.6.3-8.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/k/keyutils-libs-1.6.3-8.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: c88b58dcb9c261fe5f5375d0c370df8f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/keyutils-libs@1.6.3-8.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-krb5-libs-aarch64", "name": "krb5-libs", "versionInfo": "1.22.2-10.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/k/krb5-libs-1.22.2-10.hum1.aarch64.rpm", "licenseDeclared": "Brian-Gladman-2-Clause AND BSD-2-Clause AND (BSD-2-Clause OR GPL-2.0-or-later) AND BSD-2-Clause-first-lines AND BSD-3-Clause AND BSD-4-Clause AND CMU-Mach-nodoc AND FSFULLRWD AND HPND AND HPND-export2-US AND HPND-export-US AND HPND-export-US-acknowledgement AND HPND-export-US-modify AND ISC AND MIT AND MIT-CMU AND OLDAP-2.8 AND OpenVision", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 1896e0049e003bf0e0a919b9c19c7ee5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/krb5-libs@1.22.2-10.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libacl-aarch64", "name": "libacl", "versionInfo": "2.4.0-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libacl-2.4.0-2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: ffae68175fa17ef38ad2262456b87601"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libacl@2.4.0-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libarchive-aarch64", "name": "libarchive", "versionInfo": "3.8.9-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libarchive-3.8.9-2.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause AND FSFULLR AND GPL-2.0-or-later WITH Libtool-exception AND BSD-3-Clause AND FSFUL", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 3b2f675148801b522df73b75a03fd653"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libarchive@3.8.9-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libasan-aarch64", "name": "libasan", "versionInfo": "16.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libasan-16.2.1-2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: bb016c9de6aab3c51be612e803754d21"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libasan@16.2.1-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libassuan-aarch64", "name": "libassuan", "versionInfo": "2.5.7-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libassuan-2.5.7-6.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: b6f7844b3c2851c5c6602813fe2d91d0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libassuan@2.5.7-6.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libatomic-aarch64", "name": "libatomic", "versionInfo": "16.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libatomic-16.2.1-2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 99f877bc801efaf6974dd05385b85c5a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libatomic@16.2.1-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libattr-aarch64", "name": "libattr", "versionInfo": "2.6.0-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libattr-2.6.0-9.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: d1a9e2272f66b2470ddf103dccdbaa58"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libattr@2.6.0-9.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libblkid-aarch64", "name": "libblkid", "versionInfo": "2.42.4-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libblkid-2.42.4-2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 10f3397c3eb44fb2c4013c5c4ad9eb32"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libblkid@2.42.4-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libbrotli-aarch64", "name": "libbrotli", "versionInfo": "1.2.0-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libbrotli-1.2.0-6.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: feace71d1f825f00ceb8e304256cc238"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libbrotli@1.2.0-6.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcap-ng-aarch64", "name": "libcap-ng", "versionInfo": "0.9.6-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libcap-ng-0.9.6-1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: ebc6b6083966b53d930af232d9783a32"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcap-ng@0.9.6-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcap-aarch64", "name": "libcap", "versionInfo": "2.78-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libcap-2.78-2.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 8d8acfbe454de54f75616713b3d68f42"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcap@2.78-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcbor-aarch64", "name": "libcbor", "versionInfo": "0.14.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libcbor-0.14.0-3.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 3f1118a94a793d1a74a27b8c87ad07c1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcbor@0.14.0-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcom-err-aarch64", "name": "libcom_err", "versionInfo": "1.47.4-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libcom_err-1.47.4-2.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 69716f326f708d5cae9228784221bb99"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcom_err@1.47.4-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcurl-aarch64", "name": "libcurl", "versionInfo": "8.22.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libcurl-8.22.0-1.hum1.aarch64.rpm", "licenseDeclared": "curl", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 12e74e0968f851a636fcec4a58d47f94"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcurl@8.22.0-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libeconf-aarch64", "name": "libeconf", "versionInfo": "0.7.9-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libeconf-0.7.9-4.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: b157f37cdf2c8714f7b6b258dff6a939"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libeconf@0.7.9-4.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libevent-aarch64", "name": "libevent", "versionInfo": "2.1.13-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libevent-2.1.13-1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND ISC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: aff34d4fcfe91c9cccec6528a2597c5a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libevent@2.1.13-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfdisk-aarch64", "name": "libfdisk", "versionInfo": "2.42.4-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libfdisk-2.42.4-2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 2c1270e0715e54b92ce08a67ccbcdf59"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfdisk@2.42.4-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libffi-aarch64", "name": "libffi", "versionInfo": "3.8.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libffi-3.8.0-1.hum1.aarch64.rpm", "licenseDeclared": "MIT AND CC-PDDC AND (GPL-3.0-or-later WITH Texinfo-exception)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: e5de38eab90154a786b29dc32de26275"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libffi@3.8.0-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfido2-aarch64", "name": "libfido2", "versionInfo": "1.17.0-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libfido2-1.17.0-5.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 6e5b0f8fb08cbe79553c82858d3ac012"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfido2@1.17.0-5.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfsverity-aarch64", "name": "libfsverity", "versionInfo": "1.7-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libfsverity-1.7-4.hum1.aarch64.rpm", "licenseDeclared": "NOASSERTION", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 4baa2a2ffdbb35138f7a8bc51df79783"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfsverity@1.7-4.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgcc-aarch64", "name": "libgcc", "versionInfo": "16.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libgcc-16.2.1-2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 8df80933a93d9e89ba8c592eb40f9e00"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgcc@16.2.1-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgcrypt-aarch64", "name": "libgcrypt", "versionInfo": "1.12.4-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libgcrypt-1.12.4-1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND (BSD-3-Clause OR GPL-2.0-only) AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later AND MIT-Modern-Variant", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: c2f451f06a18d790ac869bdd2d099b32"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgcrypt@1.12.4-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgomp-aarch64", "name": "libgomp", "versionInfo": "16.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libgomp-16.2.1-2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: b045f80388fe16857a82f76bad2f7296"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgomp@16.2.1-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgpg-error-aarch64", "name": "libgpg-error", "versionInfo": "1.61-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libgpg-error-1.61-2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND (BSD-3-Clause OR LGPL-2.1-or-later) AND FSFULLR AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: fb9e2748057d9db6b8987d4a629f5171"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgpg-error@1.61-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libidn2-aarch64", "name": "libidn2", "versionInfo": "2.3.8-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libidn2-2.3.8-4.hum1.aarch64.rpm", "licenseDeclared": "(GPL-2.0-or-later OR LGPL-3.0-or-later) AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 93bbb44cb7d7f03d2246685a9a3455bf"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libidn2@2.3.8-4.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libksba-aarch64", "name": "libksba", "versionInfo": "1.8.1-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libksba-1.8.1-1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND (LGPL-3.0-or-later OR GPL-2.0-or-later)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: da3f46db2d299a2496f57549ad208071"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libksba@1.8.1-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-liblastlog2-aarch64", "name": "liblastlog2", "versionInfo": "2.42.4-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/liblastlog2-2.42.4-2.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 046860bdf4ddf4894a661caf32b2aee3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/liblastlog2@2.42.4-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libmount-aarch64", "name": "libmount", "versionInfo": "2.42.4-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libmount-2.42.4-2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: b6981caa96e7eba8546112592853dfed"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libmount@2.42.4-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libmpc-aarch64", "name": "libmpc", "versionInfo": "1.4.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libmpc-1.4.1-2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-3.0-or-later AND FSFAP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 7e6fc6a8383754b2471af3a3c1c03e8d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libmpc@1.4.1-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnghttp2-aarch64", "name": "libnghttp2", "versionInfo": "1.69.0-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libnghttp2-1.69.0-6.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 3a7c7b086ddee4cf76433a270bf737b2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnghttp2@1.69.0-6.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnghttp3-aarch64", "name": "libnghttp3", "versionInfo": "1.18.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libnghttp3-1.18.0-1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 9e9cf61d1c3502dfe08c2f443ee87d11"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnghttp3@1.18.0-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpfm-aarch64", "name": "libpfm", "versionInfo": "4.13.0-20.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/updates/44/Everything/aarch64/Packages/l/libpfm-4.13.0-20.fc44.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: f67c59ebdcc2d13a01308d6b1d6e536c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpfm@4.13.0-20.fc44?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpkgconf-aarch64", "name": "libpkgconf", "versionInfo": "2.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libpkgconf-2.5.1-2.hum1.aarch64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: c03d262f0b15195429879620b129c65f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpkgconf@2.5.1-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpsl-aarch64", "name": "libpsl", "versionInfo": "0.23.3-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libpsl-0.23.3-1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: aaf407e62acfdee2c57ccc032619e3d9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpsl@0.23.3-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libselinux-utils-aarch64", "name": "libselinux-utils", "versionInfo": "3.11-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libselinux-utils-3.11-5.hum1.aarch64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 8ef39775abf1334162c66be6657feeb5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libselinux-utils@3.11-5.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libselinux-aarch64", "name": "libselinux", "versionInfo": "3.11-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libselinux-3.11-5.hum1.aarch64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: e920b59d5cf7a5f1d8ba897151836378"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libselinux@3.11-5.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsemanage-aarch64", "name": "libsemanage", "versionInfo": "3.11-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libsemanage-3.11-4.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 9418a34313eb464bd9a0d346b7a22cbc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsemanage@3.11-4.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsepol-aarch64", "name": "libsepol", "versionInfo": "3.11-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libsepol-3.11-2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 3e127d9be9abeea7b4a4683e08d8e432"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsepol@3.11-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsmartcols-aarch64", "name": "libsmartcols", "versionInfo": "2.42.4-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libsmartcols-2.42.4-2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 32df7e3c800a675619cee63082cca34d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsmartcols@2.42.4-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libssh-config-aarch64", "name": "libssh-config", "versionInfo": "0.12.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libssh-config-0.12.2-1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: d450c1e2923e7f1f312fde84f85e7f4c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libssh-config@0.12.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libssh-aarch64", "name": "libssh", "versionInfo": "0.12.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libssh-0.12.2-1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: c4776d701fd6f0d7890799c71cf2bf3d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libssh@0.12.2-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libstdc++-aarch64", "name": "libstdc++", "versionInfo": "16.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libstdc++-16.2.1-2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 5612a55cdc752306597c23c4f6e48b0b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libstdc++@16.2.1-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtasn1-aarch64", "name": "libtasn1", "versionInfo": "4.21.0-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libtasn1-4.21.0-2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 318ea70646a5715c1cac4cd3e272c205"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtasn1@4.21.0-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtool-ltdl-aarch64", "name": "libtool-ltdl", "versionInfo": "2.6.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libtool-ltdl-2.6.2-1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.0-or-later WITH Libtool-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: dc97eb185e39cdf079bed92962c78294"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtool-ltdl@2.6.2-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libubsan-aarch64", "name": "libubsan", "versionInfo": "16.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libubsan-16.2.1-2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 72db1a9848db2a937773ad34587cb779"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libubsan@16.2.1-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libunistring-aarch64", "name": "libunistring", "versionInfo": "1.1-12.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libunistring-1.1-12.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: d3fc87840210e2fc13c5c32dcf872e26"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libunistring@1.1-12.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libusb1-aarch64", "name": "libusb1", "versionInfo": "1.0.30-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libusb1-1.0.30-2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: b97dec5930674dd53f5d7f440d9e25d6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libusb1@1.0.30-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libuuid-aarch64", "name": "libuuid", "versionInfo": "2.42.4-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libuuid-2.42.4-2.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 5357be8d932dcaa172611757ea0e990d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libuuid@2.42.4-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libverto-aarch64", "name": "libverto", "versionInfo": "0.3.2-13.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libverto-0.3.2-13.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: d2b3827ad1e8a6a390fda1320738622c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libverto@0.3.2-13.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxcrypt-devel-aarch64", "name": "libxcrypt-devel", "versionInfo": "4.5.2-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libxcrypt-devel-4.5.2-4.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND BSD-3-Clause AND BSD-2-Clause AND BSD-2-Clause-FreeBSD AND 0BSD AND CC0-1.0 AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: ea3d7fd6851852b0cf69b0de8802df7f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxcrypt-devel@4.5.2-4.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxcrypt-aarch64", "name": "libxcrypt", "versionInfo": "4.5.2-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libxcrypt-4.5.2-4.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND BSD-3-Clause AND BSD-2-Clause AND BSD-2-Clause-FreeBSD AND 0BSD AND CC0-1.0 AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: f7c2568417ad5c12817e95634370e0f8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxcrypt@4.5.2-4.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxml2-16-aarch64", "name": "libxml2-16", "versionInfo": "2.15.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libxml2-16-2.15.4-1.1.hum1.aarch64.rpm", "licenseDeclared": "MIT AND ISC-Veillard AND W3C", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 24b1ff2288f1b64eeb0ef7f6b0537764"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxml2-16@2.15.4-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libzstd-aarch64", "name": "libzstd", "versionInfo": "1.5.7-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libzstd-1.5.7-6.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 70eb1fe02f7bbbb3f16fa6aa4e858d37"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libzstd@1.5.7-6.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-linkdupes-aarch64", "name": "linkdupes", "versionInfo": "0.7.3-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/linkdupes-0.7.3-3.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND MIT AND Unicode-DFS-2016 AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND (MIT OR Zlib OR Apache-2.0) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 4eeced9df5b311d36a14928605167834"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/linkdupes@0.7.3-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lua-libs-aarch64", "name": "lua-libs", "versionInfo": "5.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/lua-libs-5.5.1-2.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: f34052375d7d5778f5f5d375076f97ed"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lua-libs@5.5.1-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lua-srpm-macros-aarch64", "name": "lua-srpm-macros", "versionInfo": "1-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/lua-srpm-macros-1-18.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 68293f00751e1bc423b0bb2ac4e21221"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lua-srpm-macros@1-18.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lz4-libs-aarch64", "name": "lz4-libs", "versionInfo": "1.10.0-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/lz4-libs-1.10.0-5.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: c37b6794aeb89ecca827d22fedaf12de"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lz4-libs@1.10.0-5.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-make-aarch64", "name": "make", "versionInfo": "1:4.4.1-13.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/m/make-4.4.1-13.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND GFDL-1.3-or-later AND FSFULLR", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: fdd58e253669d022aad03b0638c0c47a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/make@4.4.1-13.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-meson-srpm-macros-aarch64", "name": "meson-srpm-macros", "versionInfo": "1.12.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/m/meson-srpm-macros-1.12.1-2.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 7617c98560a327b943961c400248f04b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/meson-srpm-macros@1.12.1-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-mpdecimal-aarch64", "name": "mpdecimal", "versionInfo": "4.0.1-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/m/mpdecimal-4.0.1-4.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 4e1fba7bb7b792fc7f8ab063a6ab1c97"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/mpdecimal@4.0.1-4.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-mpfr-aarch64", "name": "mpfr", "versionInfo": "4.2.2-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/m/mpfr-4.2.2-4.hum1.aarch64.rpm", "licenseDeclared": "LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 500593f33c0592c6ee5f536d01f845b7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/mpfr@4.2.2-4.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ncurses-base-aarch64", "name": "ncurses-base", "versionInfo": "6.6-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/n/ncurses-base-6.6-3.hum1.noarch.rpm", "licenseDeclared": "MIT-open-group", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: ed0ef2d0c09ab58d4a094bde95e77d32"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ncurses-base@6.6-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ncurses-libs-aarch64", "name": "ncurses-libs", "versionInfo": "6.6-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/n/ncurses-libs-6.6-3.hum1.aarch64.rpm", "licenseDeclared": "MIT-open-group", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: f0c25e95a5e901f33caa5d510b81489c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ncurses-libs@6.6-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-nettle-aarch64", "name": "nettle", "versionInfo": "4.0-5.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/n/nettle-4.0-5.2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-3.0-or-later OR GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: ff1636f7dd2fdd1d48a69a950d77a099"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/nettle@4.0-5.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ngtcp2-crypto-ossl-aarch64", "name": "ngtcp2-crypto-ossl", "versionInfo": "1.22.1-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/n/ngtcp2-crypto-ossl-1.22.1-3.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: c43589640fe3686060dcfc60238e26a1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ngtcp2-crypto-ossl@1.22.1-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ngtcp2-aarch64", "name": "ngtcp2", "versionInfo": "1.22.1-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/n/ngtcp2-1.22.1-3.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 94be27c9c29b860d6122ff00c4767685"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ngtcp2@1.22.1-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-npth-aarch64", "name": "npth", "versionInfo": "1.8-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/n/npth-1.8-5.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 2d2d25b96ecbfe74dbb009ebfcd813f4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/npth@1.8-5.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ocaml-srpm-macros-aarch64", "name": "ocaml-srpm-macros", "versionInfo": "11-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/o/ocaml-srpm-macros-11-4.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 6d563b597c552c5ce842bdd83b6d8dd1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ocaml-srpm-macros@11-4.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openblas-srpm-macros-aarch64", "name": "openblas-srpm-macros", "versionInfo": "2-21.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/o/openblas-srpm-macros-2-21.1.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 0186a0c89857458e74eb7e3aec24f7f1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openblas-srpm-macros@2-21.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openldap-aarch64", "name": "openldap", "versionInfo": "2.6.13-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/o/openldap-2.6.13-4.hum1.aarch64.rpm", "licenseDeclared": "OLDAP-2.8", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 52343dd108c8df3224cf2b89afdcb7a9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openldap@2.6.13-4.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssl-fips-provider-upstream-aarch64", "name": "openssl-fips-provider-upstream", "versionInfo": "1:3.5.9-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/o/openssl-fips-provider-upstream-3.5.9-0.1.hum1.aarch64.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 414ed007a31f0e4deaac2ef1a04825bf"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssl-fips-provider-upstream@3.5.9-0.1.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssl-libs-aarch64", "name": "openssl-libs", "versionInfo": "1:3.5.9-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/o/openssl-libs-3.5.9-0.1.hum1.aarch64.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: efd11480aab1b5a8e882b79a74b5beb5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssl-libs@3.5.9-0.1.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-p11-kit-trust-aarch64", "name": "p11-kit-trust", "versionInfo": "0.26.5-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/p11-kit-trust-0.26.5-1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: a37478256d6ddcea1feb61f472fc4615"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/p11-kit-trust@0.26.5-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-p11-kit-aarch64", "name": "p11-kit", "versionInfo": "0.26.5-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/p11-kit-0.26.5-1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 498603b09a624361bf6a6805c70f7342"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/p11-kit@0.26.5-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-package-notes-srpm-macros-aarch64", "name": "package-notes-srpm-macros", "versionInfo": "0.20-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/package-notes-srpm-macros-0.20-2.hum1.noarch.rpm", "licenseDeclared": "0BSD", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 4f6f48e6009eb2455ec194f477f9b058"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/package-notes-srpm-macros@0.20-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pam-libs-aarch64", "name": "pam-libs", "versionInfo": "1.7.2-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pam-libs-1.7.2-4.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 725711fbbb7b9da11bfb501cf7b59ec0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pam-libs@1.7.2-4.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-patch-aarch64", "name": "patch", "versionInfo": "2.8-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/patch-2.8-5.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: f0c53b0eb4d3af2230d533156cbad295"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/patch@2.8-5.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-syntax-aarch64", "name": "pcre2-syntax", "versionInfo": "10.48-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pcre2-syntax-10.48-0.1.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 064cc86298c67eb327b2193c916d494f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2-syntax@10.48-0.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-aarch64", "name": "pcre2", "versionInfo": "10.48-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pcre2-10.48-0.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: dbe5a88df77beb1c1591eeadd5ac0bea"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2@10.48-0.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-perl-srpm-macros-aarch64", "name": "perl-srpm-macros", "versionInfo": "1-65.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/perl-srpm-macros-1-65.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 0f8b16c4e63430bcff87cb49fa941740"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/perl-srpm-macros@1-65.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-m4-aarch64", "name": "pkgconf-m4", "versionInfo": "2.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pkgconf-m4-2.5.1-2.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later WITH Autoconf-exception-generic", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: e013238a36bb9fbc1d2ca514dddd4ca8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf-m4@2.5.1-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-pkg-config-aarch64", "name": "pkgconf-pkg-config", "versionInfo": "2.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pkgconf-pkg-config-2.5.1-2.hum1.aarch64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: e91759d9d1c1dffe6d066e7953b347f9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf-pkg-config@2.5.1-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-aarch64", "name": "pkgconf", "versionInfo": "2.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pkgconf-2.5.1-2.hum1.aarch64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 465b4584afe124a55cab161a8c54d5b0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf@2.5.1-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-policycoreutils-aarch64", "name": "policycoreutils", "versionInfo": "3.11-2.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/policycoreutils-3.11-2.2.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 30052427d5358a1376d5aafcbbcba925"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/policycoreutils@3.11-2.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-popt-aarch64", "name": "popt", "versionInfo": "1.19-11.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/popt-1.19-11.1.hum1.aarch64.rpm", "licenseDeclared": "MIT AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: edcee4101f6f24e58beefa10daaa74eb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/popt@1.19-11.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-publicsuffix-list-dafsa-aarch64", "name": "publicsuffix-list-dafsa", "versionInfo": "20260624-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/publicsuffix-list-dafsa-20260624-2.hum1.noarch.rpm", "licenseDeclared": "MPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: c616882fad65cf900d2280a38cdcae6d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/publicsuffix-list-dafsa@20260624-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pyproject-srpm-macros-aarch64", "name": "pyproject-srpm-macros", "versionInfo": "1.23.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pyproject-srpm-macros-1.23.2-1.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: e82edc55e5be2f520af44c2b0337e92a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pyproject-srpm-macros@1.23.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python-pip-wheel-aarch64", "name": "python-pip-wheel", "versionInfo": "26.2-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/python-pip-wheel-26.2-0.1.hum1.noarch.rpm", "licenseDeclared": "MIT AND Python-2.0.1 AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MPL-2.0 AND (Apache-2.0 OR BSD-2-Clause)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 9dcd29a0499e6ffefbb360de90d31851"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python-pip-wheel@26.2-0.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python-srpm-macros-aarch64", "name": "python-srpm-macros", "versionInfo": "3.14-12.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/python-srpm-macros-3.14-12.2.hum1.noarch.rpm", "licenseDeclared": "MIT AND PSF-2.0 AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 618d0c006548a702f22df8ec49dca3a5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python-srpm-macros@3.14-12.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-boolean.py-aarch64", "name": "python3-boolean.py", "versionInfo": "5.0-10.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/aarch64/os/Packages/p/python3-boolean.py-5.0-10.fc44.noarch.rpm", "licenseDeclared": "NOASSERTION", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: b7af00dcc3668fd56d3b09f1f1b171a9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-boolean.py@5.0-10.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-libs-aarch64", "name": "python3-libs", "versionInfo": "3.14.7-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/python3-libs-3.14.7-1.2.hum1.aarch64.rpm", "licenseDeclared": "Python-2.0.1 AND MIT AND BSD-3-Clause AND MIT-CMU AND HPND-SMC AND BSD-2-Clause AND dtoa AND Unicode-3.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: e12a03f13ad1081f450d27d3bda92053"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-libs@3.14.7-1.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-license-expression-aarch64", "name": "python3-license-expression", "versionInfo": "30.4.4-4.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/aarch64/os/Packages/p/python3-license-expression-30.4.4-4.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 009ffab3cc792b96ce398d6c97aa5a0a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-license-expression@30.4.4-4.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-aarch64", "name": "python3", "versionInfo": "3.14.7-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/python3-3.14.7-1.2.hum1.aarch64.rpm", "licenseDeclared": "Python-2.0.1", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: e66f0e241fe2514d32a3d664440b7a88"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3@3.14.7-1.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-qt5-srpm-macros-aarch64", "name": "qt5-srpm-macros", "versionInfo": "5.15.18-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/q/qt5-srpm-macros-5.15.18-3.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 38abd8c7f1184339bff7ddf1044f1b7d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/qt5-srpm-macros@5.15.18-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-qt6-srpm-macros-aarch64", "name": "qt6-srpm-macros", "versionInfo": "6.11.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/q/qt6-srpm-macros-6.11.2-1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 8684a2b8276c41d1e69ef971a6b044b3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/qt6-srpm-macros@6.11.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-readline-aarch64", "name": "readline", "versionInfo": "8.3-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/readline-8.3-6.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 8ee6e9a4c20b9fd115c4a99dc0bde5e1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/readline@8.3-6.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-redhat-rpm-config-aarch64", "name": "redhat-rpm-config", "versionInfo": "345-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/redhat-rpm-config-345-4.hum1.noarch.rpm", "licenseDeclared": "GPL-1.0-or-later AND GPL-2.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 9e9b9de801d40d8b16d77058da82cde9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/redhat-rpm-config@345-4.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-build-libs-aarch64", "name": "rpm-build-libs", "versionInfo": "6.1.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rpm-build-libs-6.1.0-1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 0a248baf83b9cde991cceabd3140f58a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-build-libs@6.1.0-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-build-aarch64", "name": "rpm-build", "versionInfo": "6.1.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rpm-build-6.1.0-1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 4f43fa2d1cb33b8610570e859ecdd499"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-build@6.1.0-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-libs-aarch64", "name": "rpm-libs", "versionInfo": "6.1.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rpm-libs-6.1.0-1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 59983296f994b99a6484cbc6f14da060"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-libs@6.1.0-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-plugin-selinux-aarch64", "name": "rpm-plugin-selinux", "versionInfo": "6.1.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rpm-plugin-selinux-6.1.0-1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 852223a461671a059861888fa3d9021b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-plugin-selinux@6.1.0-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-sequoia-aarch64", "name": "rpm-sequoia", "versionInfo": "1.10.1.1-1.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rpm-sequoia-1.10.1.1-1.4.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.0-or-later AND Apache-2.0 AND BSL-1.0 AND MIT AND Unicode-DFS-2016 AND (Apache-2.0 OR MIT) AND (MIT OR Apache-2.0 OR Zlib) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 0e9ce827dbce85a516111c0af513ecc5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-sequoia@1.10.1.1-1.4.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-sign-libs-aarch64", "name": "rpm-sign-libs", "versionInfo": "6.1.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rpm-sign-libs-6.1.0-1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 4a565f4b88afeebedb65f97560ebb260"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-sign-libs@6.1.0-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-aarch64", "name": "rpm", "versionInfo": "6.1.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rpm-6.1.0-1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: e40258a166d0a27bf2daf24c1c6df6de"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm@6.1.0-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rust-srpm-macros-aarch64", "name": "rust-srpm-macros", "versionInfo": "28.5-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rust-srpm-macros-28.5-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 606a7a2166723ba0e3515fa8244596dc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rust-srpm-macros@28.5-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sed-aarch64", "name": "sed", "versionInfo": "4.10-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/sed-4.10-2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 1b82c2a261faea026af9bb5267bf42f2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sed@4.10-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-selinux-policy-targeted-aarch64", "name": "selinux-policy-targeted", "versionInfo": "45.20-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/selinux-policy-targeted-45.20-1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: da1ab75642b93136f12d0daeb5192e61"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/selinux-policy-targeted@45.20-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-selinux-policy-aarch64", "name": "selinux-policy", "versionInfo": "45.20-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/selinux-policy-45.20-1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 9a69b28791e2e3905fc04853edf11a21"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/selinux-policy@45.20-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-setup-aarch64", "name": "setup", "versionInfo": "2.15.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/setup-2.15.1-2.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 7a592a3640b848d6c4480ef947a4d907"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/setup@2.15.1-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-shadow-utils-aarch64", "name": "shadow-utils", "versionInfo": "2:4.20.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/shadow-utils-4.20.0-1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 40a51a0d183ff7f1a68daf7791d3b9b5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/shadow-utils@4.20.0-1.hum1?arch=aarch64&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sqlite-libs-aarch64", "name": "sqlite-libs", "versionInfo": "3.53.4-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/sqlite-libs-3.53.4-1.hum1.aarch64.rpm", "licenseDeclared": "blessing", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 7ead00a021d33f90c57361ecf9d971a3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sqlite-libs@3.53.4-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-libs-aarch64", "name": "systemd-libs", "versionInfo": "261.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/systemd-libs-261.2-1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: fa037fc56814a272a7ce0aa8092e1b8e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-libs@261.2-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-standalone-sysusers-aarch64", "name": "systemd-standalone-sysusers", "versionInfo": "261.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/systemd-standalone-sysusers-261.2-1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 9c028da81a867af0620145e2e910b952"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-standalone-sysusers@261.2-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tar-aarch64", "name": "tar", "versionInfo": "2:1.35-10.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/t/tar-1.35-10.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 0118db45814e90065d5182d3a4bab0c8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tar@1.35-10.hum1?arch=aarch64&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tpm2-tss-aarch64", "name": "tpm2-tss", "versionInfo": "4.2.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/t/tpm2-tss-4.2.0-1.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 6da488ba394313803f00e4d54ac462e6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tpm2-tss@4.2.0-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tree-sitter-srpm-macros-aarch64", "name": "tree-sitter-srpm-macros", "versionInfo": "0.4.6-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/t/tree-sitter-srpm-macros-0.4.6-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: f65af17df28df341ec383338fcc47481"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tree-sitter-srpm-macros@0.4.6-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tzdata-aarch64", "name": "tzdata", "versionInfo": "2026c-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/t/tzdata-2026c-2.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain AND (GPL-2.0-only WITH ClassPath-exception-2.0)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: a7e227263e697ecc5c439df169c1c4d3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tzdata@2026c-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-unzip-aarch64", "name": "unzip", "versionInfo": "6.0-71.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/u/unzip-6.0-71.hum1.aarch64.rpm", "licenseDeclared": "Info-ZIP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: c32413909b77ce36fe26d1c6ecab8386"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/unzip@6.0-71.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-util-linux-core-aarch64", "name": "util-linux-core", "versionInfo": "2.42.4-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/u/util-linux-core-2.42.4-2.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 6838cd5a915bd2c46d2d3098ef2d0f4c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/util-linux-core@2.42.4-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-util-linux-aarch64", "name": "util-linux", "versionInfo": "2.42.4-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/u/util-linux-2.42.4-2.hum1.aarch64.rpm", "licenseDeclared": "GPL-1.0-or-later AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 027a4e535e287f170c3ab75b653f8b29"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/util-linux@2.42.4-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-which-aarch64", "name": "which", "versionInfo": "2.25-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/w/which-2.25-2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 747a9cd9e442fc5c1985bc67953c18d6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/which@2.25-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xxhash-libs-aarch64", "name": "xxhash-libs", "versionInfo": "0.8.4-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/x/xxhash-libs-0.8.4-1.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 5bb50fec7de81255f7d39a88f2b46d38"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xxhash-libs@0.8.4-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xz-libs-aarch64", "name": "xz-libs", "versionInfo": "1:5.8.4-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/x/xz-libs-5.8.4-1.hum1.aarch64.rpm", "licenseDeclared": "0BSD", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 0f997bdc93f92c30ff906366805cf3a3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xz-libs@5.8.4-1.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xz-aarch64", "name": "xz", "versionInfo": "1:5.8.4-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/x/xz-5.8.4-1.hum1.aarch64.rpm", "licenseDeclared": "0BSD AND GPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: f9438c192ea6be09f632653f53639cd0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xz@5.8.4-1.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zig-srpm-macros-aarch64", "name": "zig-srpm-macros", "versionInfo": "1-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/z/zig-srpm-macros-1-9.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 0c226eb1fa4d5fc3d272055b6397b077"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zig-srpm-macros@1-9.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zip-aarch64", "name": "zip", "versionInfo": "3.0-45.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/z/zip-3.0-45.1.hum1.aarch64.rpm", "licenseDeclared": "Info-ZIP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: b7f6bc60325f5aab6ac6773968e28bf6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zip@3.0-45.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zlib-ng-compat-aarch64", "name": "zlib-ng-compat", "versionInfo": "2.3.3-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/z/zlib-ng-compat-2.3.3-6.hum1.aarch64.rpm", "licenseDeclared": "Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 8d7b0f61abc2a16a0ba4c488e1cb78a4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zlib-ng-compat@2.3.3-6.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zstd-aarch64", "name": "zstd", "versionInfo": "1.5.7-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/z/zstd-1.5.7-6.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 33923dfdd7930adb5d5e953bba4a3452"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zstd@1.5.7-6.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "name": "oauth2-proxy-buildroot-x86_64", "versionInfo": "77531cad", "downloadLocation": "NOASSERTION", "filesAnalyzed": false}, {"SPDXID": "SPDXRef-Buildroot-Package-R-srpm-macros-x86-64", "name": "R-srpm-macros", "versionInfo": "1.3.7-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/R-srpm-macros-1.3.7-3.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: af95299e83e51b62a40fa7a42d357077"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/R-srpm-macros@1.3.7-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-add-determinism-x86-64", "name": "add-determinism", "versionInfo": "0.7.3-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/add-determinism-0.7.3-3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND MIT AND Unicode-DFS-2016 AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 OR MIT) AND (Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND (MIT OR Zlib OR Apache-2.0) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: d599f3c879b1a93f7a50d8c2c2f8aa2e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/add-determinism@0.7.3-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-alternatives-x86-64", "name": "alternatives", "versionInfo": "1.33-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/alternatives-1.33-5.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 49f9259756d5c706df2b6570ff5b5cea"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/alternatives@1.33-5.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-annobin-docs-x86-64", "name": "annobin-docs", "versionInfo": "13.32-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/annobin-docs-13.32-1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND GFDL-1.3-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: f7b82d32f1e08c859e3b8de4668a28fc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/annobin-docs@13.32-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-annobin-plugin-gcc-x86-64", "name": "annobin-plugin-gcc", "versionInfo": "13.32-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/annobin-plugin-gcc-13.32-1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND GFDL-1.3-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 1991f67e2f7fb6d4602ec35f7858683d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/annobin-plugin-gcc@13.32-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ansible-srpm-macros-x86-64", "name": "ansible-srpm-macros", "versionInfo": "1-22.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/ansible-srpm-macros-1-22.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 6343ff368e5236625d015dbc91e70769"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ansible-srpm-macros@1-22.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-askalono-cli-x86-64", "name": "askalono-cli", "versionInfo": "0.5.0-4.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/a/askalono-cli-0.5.0-4.fc44.x86_64.rpm", "licenseDeclared": "Apache-2.0 AND CC0-1.0 AND MIT AND Unicode-DFS-2016 AND (Apache-2.0 OR BSL-1.0) AND (Apache-2.0 OR MIT) AND (MIT OR Apache-2.0 OR Zlib) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 02a05ce513bee7180cb21f5cd846f783"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/askalono-cli@0.5.0-4.fc44?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-audit-libs-x86-64", "name": "audit-libs", "versionInfo": "4.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/audit-libs-4.2.1-2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 25236c26c96434cd2c084d5df98e55cd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/audit-libs@4.2.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bash-x86-64", "name": "bash", "versionInfo": "5.3.15-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/bash-5.3.15-2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 35c598d1f15aba91f61b244abf8d0fbc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bash@5.3.15-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-binutils-x86-64", "name": "binutils", "versionInfo": "2.46.1-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/binutils-2.46.1-1.2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-3.0-or-later WITH Bison-exception-2.2) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND BSD-3-Clause AND GFDL-1.3-or-later AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: b412b4b29a227a1db90d9f002da04498"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/binutils@2.46.1-1.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-build-reproducibility-srpm-macros-x86-64", "name": "build-reproducibility-srpm-macros", "versionInfo": "0.7.3-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/build-reproducibility-srpm-macros-0.7.3-3.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: b7d13395d88324c0009658f89c21ec4d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/build-reproducibility-srpm-macros@0.7.3-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bzip2-libs-x86-64", "name": "bzip2-libs", "versionInfo": "1.0.8-24.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/bzip2-libs-1.0.8-24.hum1.x86_64.rpm", "licenseDeclared": "BSD-4-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: eed9f8d38229149ee3ba920f26ec2634"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bzip2-libs@1.0.8-24.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bzip2-x86-64", "name": "bzip2", "versionInfo": "1.0.8-24.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/bzip2-1.0.8-24.hum1.x86_64.rpm", "licenseDeclared": "BSD-4-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: ed5ad98a73dbc065c211ed6d9a6be8bf"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bzip2@1.0.8-24.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ca-certificates-x86-64", "name": "ca-certificates", "versionInfo": "2026.2.90_v9.0.317-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/ca-certificates-2026.2.90_v9.0.317-1.hum1.noarch.rpm", "licenseDeclared": "MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 7898dfbff66ba7ff7ab734e7295a7073"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ca-certificates@2026.2.90_v9.0.317-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cmake-srpm-macros-x86-64", "name": "cmake-srpm-macros", "versionInfo": "4.3.0-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/cmake-srpm-macros-4.3.0-5.1.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND MIT-open-group AND Zlib AND Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: f4f531a89be4477f0d05fc8fbf71ce81"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cmake-srpm-macros@4.3.0-5.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-coreutils-common-x86-64", "name": "coreutils-common", "versionInfo": "9.12-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/coreutils-common-9.12-1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-no-invariants-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: d812fb931943b9a61b9c1fca388cf911"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/coreutils-common@9.12-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-coreutils-x86-64", "name": "coreutils", "versionInfo": "9.12-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/coreutils-9.12-1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-no-invariants-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 2312378c97597d4601a0c1c4e2908b98"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/coreutils@9.12-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cpio-x86-64", "name": "cpio", "versionInfo": "2.15-10.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/cpio-2.15-10.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: c073bae358997220d77e1ef8887532d0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cpio@2.15-10.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cpp-x86-64", "name": "cpp", "versionInfo": "16.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/cpp-16.2.1-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 33cab8b219feb932f853b17bc813df51"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cpp@16.2.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-crypto-policies-config-default-x86-64", "name": "crypto-policies-config-default", "versionInfo": "20260812-1.git359ab16.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/crypto-policies-config-default-20260812-1.git359ab16.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 9691d62eb992aa2ad5a5756c54e89543"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/crypto-policies-config-default@20260812-1.git359ab16.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-crypto-policies-x86-64", "name": "crypto-policies", "versionInfo": "20260812-1.git359ab16.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/crypto-policies-20260812-1.git359ab16.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: b90f2e7121797f48ce72da9beb5c9abe"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/crypto-policies@20260812-1.git359ab16.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-curl-x86-64", "name": "curl", "versionInfo": "8.22.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/curl-8.22.0-1.hum1.x86_64.rpm", "licenseDeclared": "curl", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: a406782db0e344b07418e05678595ee8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/curl@8.22.0-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cyrus-sasl-lib-x86-64", "name": "cyrus-sasl-lib", "versionInfo": "2.1.28-37.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/cyrus-sasl-lib-2.1.28-37.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-Attribution-HPND-disclaimer", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 266c623e6d845c8594aa574261208db1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cyrus-sasl-lib@2.1.28-37.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-debugedit-x86-64", "name": "debugedit", "versionInfo": "5.3-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/d/debugedit-5.3-3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 4510f40574dd3d6c447121aad1bfb3a9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/debugedit@5.3-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-diffutils-x86-64", "name": "diffutils", "versionInfo": "3.12-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/d/diffutils-3.12-6.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 0f1fdf69f5ed7422a5669c80a7fdf1d2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/diffutils@3.12-6.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-dwz-x86-64", "name": "dwz", "versionInfo": "0.17-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/d/dwz-0.17-3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND GPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 857b4cf1ffa022a0d3fd4237703ed33a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/dwz@0.17-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ed-x86-64", "name": "ed", "versionInfo": "1.22.6-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/ed-1.22.6-1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-only AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 67e9e412f7f6eb77770feadf190fff63"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ed@1.22.6-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-efi-srpm-macros-x86-64", "name": "efi-srpm-macros", "versionInfo": "6-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/efi-srpm-macros-6-9.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: cba49c2554beb37df9cc6bb744737e2b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/efi-srpm-macros@6-9.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-debuginfod-client-x86-64", "name": "elfutils-debuginfod-client", "versionInfo": "0.196-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/elfutils-debuginfod-client-0.196-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-2.0-or-later OR LGPL-3.0-or-later)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: c9b05c1c56e6b6e2e662124e9113f35c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-debuginfod-client@0.196-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-libelf-x86-64", "name": "elfutils-libelf", "versionInfo": "0.196-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/elfutils-libelf-0.196-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 06a9e7b4e1ae267637c31a55908c58ed"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-libelf@0.196-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-libs-x86-64", "name": "elfutils-libs", "versionInfo": "0.196-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/elfutils-libs-0.196-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: d6b7fc024c1650a5d07a866a0bee6173"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-libs@0.196-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-x86-64", "name": "elfutils", "versionInfo": "0.196-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/elfutils-0.196-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-2.0-or-later OR LGPL-3.0-or-later) AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: e4968bf39e3fae91e3c199b8ae734a26"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils@0.196-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-erlang-srpm-macros-x86-64", "name": "erlang-srpm-macros", "versionInfo": "0.3.11-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/erlang-srpm-macros-0.3.11-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 063020bc2b254fec865c06f313930cec"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/erlang-srpm-macros@0.3.11-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-expat-x86-64", "name": "expat", "versionInfo": "2.8.4-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/expat-2.8.4-0.2.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 676350bbd76a03229cced652c4f6498d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/expat@2.8.4-0.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-file-libs-x86-64", "name": "file-libs", "versionInfo": "5.48-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/file-libs-5.48-3.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause-Darwin AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 3011bd0b02ede9edac71a65e99147e3a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/file-libs@5.48-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-filesystem-srpm-macros-x86-64", "name": "filesystem-srpm-macros", "versionInfo": "3.18-59.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/filesystem-srpm-macros-3.18-59.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 70275b951d6f88ee50376b509b62df87"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/filesystem-srpm-macros@3.18-59.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-filesystem-x86-64", "name": "filesystem", "versionInfo": "3.18-59.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/filesystem-3.18-59.hum1.x86_64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: a6149e4767a7cf4d382b9c7363233909"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/filesystem@3.18-59.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-file-x86-64", "name": "file", "versionInfo": "5.48-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/file-5.48-3.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause-Darwin AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: e149bc26d884bf5a5ee6102ad3247a1b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/file@5.48-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-findutils-x86-64", "name": "findutils", "versionInfo": "1:4.11.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/findutils-4.11.0-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: fe5a4416f64ae8bf85a0f6da30837f54"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/findutils@4.11.0-1.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-fonts-srpm-macros-x86-64", "name": "fonts-srpm-macros", "versionInfo": "1:5.0.0-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/fonts-srpm-macros-5.0.0-4.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 72e451571f24737949a256d091508d0c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/fonts-srpm-macros@5.0.0-4.hum1?arch=noarch&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-forge-srpm-macros-x86-64", "name": "forge-srpm-macros", "versionInfo": "0.4.0-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/forge-srpm-macros-0.4.0-5.hum1.noarch.rpm", "licenseDeclared": "GPL-1.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: bfbed65969ec708556df3750591a377d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/forge-srpm-macros@0.4.0-5.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-fpc-srpm-macros-x86-64", "name": "fpc-srpm-macros", "versionInfo": "1.3-17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/fpc-srpm-macros-1.3-17.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 1f7e4cb902ccc37236f8d34ff8873cf2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/fpc-srpm-macros@1.3-17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gap-srpm-macros-x86-64", "name": "gap-srpm-macros", "versionInfo": "2-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gap-srpm-macros-2-3.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 70e3423696085d13791fefc0be7cdf15"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gap-srpm-macros@2-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gawk-x86-64", "name": "gawk", "versionInfo": "5.4.1-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gawk-5.4.1-1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: aa0b0ed2ab703a0a1380be08760ac1c1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gawk@5.4.1-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gcc-plugin-annobin-x86-64", "name": "gcc-plugin-annobin", "versionInfo": "16.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gcc-plugin-annobin-16.2.1-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 9caf82b25d48d0ca94e96e34a034c703"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gcc-plugin-annobin@16.2.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gcc-x86-64", "name": "gcc", "versionInfo": "16.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gcc-16.2.1-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 9562d9766118e39be2e9e0f2f92bf455"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gcc@16.2.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gdb-minimal-x86-64", "name": "gdb-minimal", "versionInfo": "17.2-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gdb-minimal-17.2-6.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND BSD-3-Clause AND FSFAP AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain AND GFDL-1.3-or-later AND LGPL-2.0-or-later WITH GCC-exception-2.0 AND GPL-3.0-or-later WITH GCC-exception-3.1 AND GPL-2.0-or-later WITH GNU-compiler-exception AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: eecc3642be0c160e16f5cf1569b8f3fd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gdb-minimal@17.2-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gdbm-libs-x86-64", "name": "gdbm-libs", "versionInfo": "1:1.23-12.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gdbm-libs-1.23-12.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 16d5cf0e1a204da7d8dfec016f321ee0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gdbm-libs@1.23-12.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ghc-srpm-macros-x86-64", "name": "ghc-srpm-macros", "versionInfo": "1.10-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/ghc-srpm-macros-1.10-2.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: c59363c566e4f370953f5f4b048e594e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ghc-srpm-macros@1.10-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-common-x86-64", "name": "glibc-common", "versionInfo": "2.43-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-common-2.43-9.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: b1dbf49446ebbf0d5d0727fe2707f90e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-common@2.43-9.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-devel-x86-64", "name": "glibc-devel", "versionInfo": "2.43-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-devel-2.43-9.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: a2361726c97d8b41c615f27322ac1f9a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-devel@2.43-9.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-gconv-extra-x86-64", "name": "glibc-gconv-extra", "versionInfo": "2.43-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-gconv-extra-2.43-9.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 914c31d74adb250475991637a9ff1af6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-gconv-extra@2.43-9.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-minimal-langpack-x86-64", "name": "glibc-minimal-langpack", "versionInfo": "2.43-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-minimal-langpack-2.43-9.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 8d160edb007c7c97b07a271857949cd8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-minimal-langpack@2.43-9.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-x86-64", "name": "glibc", "versionInfo": "2.43-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-2.43-9.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 10d0fa646fa32e624e7e3d46c8964018"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc@2.43-9.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gmp-x86-64", "name": "gmp", "versionInfo": "1:6.3.0-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gmp-6.3.0-6.hum1.x86_64.rpm", "licenseDeclared": "(LGPL-3.0-or-later OR GPL-2.0-or-later OR (LGPL-3.0-or-later AND GPL-2.0-or-later)) AND GFDL-1.3-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 8333c5d90507e9736f0e303c1d522bc7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gmp@6.3.0-6.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnat-srpm-macros-x86-64", "name": "gnat-srpm-macros", "versionInfo": "7-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnat-srpm-macros-7-3.hum1.noarch.rpm", "licenseDeclared": "FSFAP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 66efb6ab04e5e1a84478a688e2f149a3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnat-srpm-macros@7-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnome-srpm-macros-x86-64", "name": "gnome-srpm-macros", "versionInfo": "1.0-1.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/updates/44/Everything/x86_64/Packages/g/gnome-srpm-macros-1.0-1.fc44.noarch.rpm", "licenseDeclared": "Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 2bbaa6afcb861d76b0036e4b5bf9b3be"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnome-srpm-macros@1.0-1.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnulib-l10n-x86-64", "name": "gnulib-l10n", "versionInfo": "20241231-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnulib-l10n-20241231-4.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 8299247dcb1565848a3336c23caa59b6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnulib-l10n@20241231-4.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-dirmngr-x86-64", "name": "gnupg2-dirmngr", "versionInfo": "2.4.9-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-dirmngr-2.4.9-18.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 9f2721ea3da813f95e0ad372005b7529"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-dirmngr@2.4.9-18.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-gpg-agent-x86-64", "name": "gnupg2-gpg-agent", "versionInfo": "2.4.9-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-gpg-agent-2.4.9-18.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: cacaf2b33174d8b69711aa44ccc468fc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-gpg-agent@2.4.9-18.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-gpgconf-x86-64", "name": "gnupg2-gpgconf", "versionInfo": "2.4.9-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-gpgconf-2.4.9-18.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: f03517c24814af85fc2cf0c88c52cc3f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-gpgconf@2.4.9-18.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-keyboxd-x86-64", "name": "gnupg2-keyboxd", "versionInfo": "2.4.9-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-keyboxd-2.4.9-18.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 1558980b4762e26e31e9250935327328"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-keyboxd@2.4.9-18.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-verify-x86-64", "name": "gnupg2-verify", "versionInfo": "2.4.9-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-verify-2.4.9-18.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 29926505c40dfc97edbcac3739fa6fad"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-verify@2.4.9-18.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-x86-64", "name": "gnupg2", "versionInfo": "2.4.9-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-2.4.9-18.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 8d857842147cc33655aa852ce16a6d0e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2@2.4.9-18.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnutls-x86-64", "name": "gnutls", "versionInfo": "3.8.13-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnutls-3.8.13-5.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: dec6eaef796fed251d930e3f8eafcfd7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnutls@3.8.13-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-filesystem-x86-64", "name": "go-filesystem", "versionInfo": "3.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/go-filesystem-3.8.0-3.hum1.x86_64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: b7ba053e6fc52967827728a4a06c6592"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-filesystem@3.8.0-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-rpm-macros-x86-64", "name": "go-rpm-macros", "versionInfo": "3.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/go-rpm-macros-3.8.0-3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 9ee7b1a24cd488ecf4304dfe6dbedc8f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-rpm-macros@3.8.0-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-srpm-macros-x86-64", "name": "go-srpm-macros", "versionInfo": "3.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/go-srpm-macros-3.8.0-3.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 58fd7d8eb056ce7d09e3ba375de1effc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-srpm-macros@3.8.0-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-vendor-tools-x86-64", "name": "go-vendor-tools", "versionInfo": "0.12.0-1.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/updates/44/Everything/x86_64/Packages/g/go-vendor-tools-0.12.0-1.fc44.noarch.rpm", "licenseDeclared": "MIT AND BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 7c4ed6389413dbed713121b1168f24da"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-vendor-tools@0.12.0-1.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-bin-x86-64", "name": "golang1.27-bin", "versionInfo": "1.27.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/golang1.27-bin-1.27.1-2.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 5d494cb2adb44c9df44d9ce58121104d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27-bin@1.27.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-src-x86-64", "name": "golang1.27-src", "versionInfo": "1.27.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/golang1.27-src-1.27.1-2.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 836c68a2d4a36e53e33ae1587ba7e23d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27-src@1.27.1-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-x86-64", "name": "golang1.27", "versionInfo": "1.27.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/golang1.27-1.27.1-2.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 075418c7c86a2f83e2870f0ef04b1b64"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27@1.27.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golist-x86-64", "name": "golist", "versionInfo": "0.11.0-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/golist-0.11.0-2.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause AND BSD-3-Clause AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: c94866cb8a1c5c8a4f2192fce2ae701f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golist@0.11.0-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gpgverify-x86-64", "name": "gpgverify", "versionInfo": "2.2-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gpgverify-2.2-5.hum1.noarch.rpm", "licenseDeclared": "Boehm-GC", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 9637bdca60814388d4c5b144d923e6d4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gpgverify@2.2-5.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-grep-x86-64", "name": "grep", "versionInfo": "3.12-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/grep-3.12-4.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: e9b48d78eb8bf0c4148539f2d7590630"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/grep@3.12-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gzip-x86-64", "name": "gzip", "versionInfo": "1.14-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gzip-1.14-4.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 23b0f59e33577a569a570da5c778a94b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gzip@1.14-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-gpg-keys-x86-64", "name": "hummingbird-gpg-keys", "versionInfo": "20251124-1.16.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/h/hummingbird-gpg-keys-20251124-1.16.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 293719e921051d2c474acc222cc0955d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-gpg-keys@20251124-1.16.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-release-x86-64", "name": "hummingbird-release", "versionInfo": "20251124-1.16.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/h/hummingbird-release-20251124-1.16.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 4443e83eba871e4e77290c97065ffa02"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-release@20251124-1.16.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-repos-x86-64", "name": "hummingbird-repos", "versionInfo": "20251124-1.16.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/h/hummingbird-repos-20251124-1.16.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: c889167c7b3cca62bb596d3cfbd63b6d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-repos@20251124-1.16.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ima-evm-utils-libs-x86-64", "name": "ima-evm-utils-libs", "versionInfo": "1.6.2-12.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/i/ima-evm-utils-libs-1.6.2-12.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 13293a1d14d37f008481dc8932e105a4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ima-evm-utils-libs@1.6.2-12.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-info-x86-64", "name": "info", "versionInfo": "7.2-9.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/i/info-7.2-9.fc44.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 7cd06c9116234e26a968b1c2ff5be47d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/info@7.2-9.fc44?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-jansson-x86-64", "name": "jansson", "versionInfo": "2.14-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/jansson-2.14-5.hum1.x86_64.rpm", "licenseDeclared": "MIT AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: e8197a7cf76ae8dbc808b4e96fefb59f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/jansson@2.14-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-java-srpm-macros-x86-64", "name": "java-srpm-macros", "versionInfo": "1-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/java-srpm-macros-1-9.hum1.noarch.rpm", "licenseDeclared": "MIT-0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 367fafb59cbd6a02034ba8bafdafe9c9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/java-srpm-macros@1-9.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-json-c-x86-64", "name": "json-c", "versionInfo": "0.18-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/json-c-0.18-9.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: e77db91a34f0bbe04e9c920b4509229b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/json-c@0.18-9.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-kernel-headers-x86-64", "name": "kernel-headers", "versionInfo": "7.2.0-61.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/k/kernel-headers-7.2.0-61.hum1.x86_64.rpm", "licenseDeclared": "((GPL-2.0-only WITH Linux-syscall-note) OR BSD-2-Clause) AND ((GPL-2.0-only WITH Linux-syscall-note) OR BSD-3-Clause) AND ((GPL-2.0-only WITH Linux-syscall-note) OR CDDL-1.0) AND ((GPL-2.0-only WITH Linux-syscall-note) OR Linux-OpenIB) AND ((GPL-2.0-only WITH Linux-syscall-note) OR MIT) AND ((GPL-2.0-or-later WITH Linux-syscall-note) OR BSD-3-Clause) AND ((GPL-2.0-or-later WITH Linux-syscall-note) OR MIT) AND BSD-3-Clause AND (GPL-1.0-or-later WITH Linux-syscall-note) AND GPL-2.0-only AND (GPL-2.0-only WITH Linux-syscall-note) AND (GPL-2.0-or-later WITH Linux-syscall-note) AND (LGPL-2.0-or-later WITH Linux-syscall-note) AND (LGPL-2.1-only WITH Linux-syscall-note) AND (LGPL-2.1-or-later WITH Linux-syscall-note) AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: f84364e16e93caeed82e1c2d9fdcb008"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/kernel-headers@7.2.0-61.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-kernel-srpm-macros-x86-64", "name": "kernel-srpm-macros", "versionInfo": "1.0-30.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/k/kernel-srpm-macros-1.0-30.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: d6fe851b8eed59b0b3ed90411974a3f1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/kernel-srpm-macros@1.0-30.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-keyutils-libs-x86-64", "name": "keyutils-libs", "versionInfo": "1.6.3-8.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/k/keyutils-libs-1.6.3-8.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: f3314a91e4eea1720410bcd3b770ab81"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/keyutils-libs@1.6.3-8.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-krb5-libs-x86-64", "name": "krb5-libs", "versionInfo": "1.22.2-10.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/k/krb5-libs-1.22.2-10.hum1.x86_64.rpm", "licenseDeclared": "Brian-Gladman-2-Clause AND BSD-2-Clause AND (BSD-2-Clause OR GPL-2.0-or-later) AND BSD-2-Clause-first-lines AND BSD-3-Clause AND BSD-4-Clause AND CMU-Mach-nodoc AND FSFULLRWD AND HPND AND HPND-export2-US AND HPND-export-US AND HPND-export-US-acknowledgement AND HPND-export-US-modify AND ISC AND MIT AND MIT-CMU AND OLDAP-2.8 AND OpenVision", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 4bb9e283d6fa5b4023580e1fa7a2515b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/krb5-libs@1.22.2-10.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libacl-x86-64", "name": "libacl", "versionInfo": "2.4.0-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libacl-2.4.0-2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 778d6a835f1bfcb1eba15772105b50dc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libacl@2.4.0-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libarchive-x86-64", "name": "libarchive", "versionInfo": "3.8.9-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libarchive-3.8.9-2.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause AND FSFULLR AND GPL-2.0-or-later WITH Libtool-exception AND BSD-3-Clause AND FSFUL", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 8bfd084ad1337a4352461c5b9f313570"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libarchive@3.8.9-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libassuan-x86-64", "name": "libassuan", "versionInfo": "2.5.7-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libassuan-2.5.7-6.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 3d2e4518c599f045df67f8766d514be1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libassuan@2.5.7-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libatomic-x86-64", "name": "libatomic", "versionInfo": "16.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libatomic-16.2.1-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 37e244274b83335bb43dd46319e49f8d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libatomic@16.2.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libattr-x86-64", "name": "libattr", "versionInfo": "2.6.0-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libattr-2.6.0-9.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: d585f6a64162151c857c9401a1cbf3e0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libattr@2.6.0-9.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libblkid-x86-64", "name": "libblkid", "versionInfo": "2.42.4-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libblkid-2.42.4-2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 026bee45e40328051e7e1e0a81e3c751"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libblkid@2.42.4-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libbrotli-x86-64", "name": "libbrotli", "versionInfo": "1.2.0-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libbrotli-1.2.0-6.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 04bf9b2dab99d0b0957ddc802b552a3a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libbrotli@1.2.0-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcap-ng-x86-64", "name": "libcap-ng", "versionInfo": "0.9.6-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcap-ng-0.9.6-1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 807105e0159a6a1298dab7bf060f4c76"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcap-ng@0.9.6-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcap-x86-64", "name": "libcap", "versionInfo": "2.78-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcap-2.78-2.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 99e45918735b0a73e5d7fa59ca39d79c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcap@2.78-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcbor-x86-64", "name": "libcbor", "versionInfo": "0.14.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcbor-0.14.0-3.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: f3c1be1d36e9f029f995536b6e55a86c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcbor@0.14.0-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcom-err-x86-64", "name": "libcom_err", "versionInfo": "1.47.4-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcom_err-1.47.4-2.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: efa036217a574dc291905e1d6787e5fd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcom_err@1.47.4-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcurl-x86-64", "name": "libcurl", "versionInfo": "8.22.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcurl-8.22.0-1.hum1.x86_64.rpm", "licenseDeclared": "curl", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 612a025fc6c9a8f31c1ac3f525371fb4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcurl@8.22.0-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libeconf-x86-64", "name": "libeconf", "versionInfo": "0.7.9-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libeconf-0.7.9-4.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: f286b987da4aba89effee118c74d63c1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libeconf@0.7.9-4.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libevent-x86-64", "name": "libevent", "versionInfo": "2.1.13-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libevent-2.1.13-1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND ISC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 492661d301f2c45b3f100094dc30ac71"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libevent@2.1.13-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfdisk-x86-64", "name": "libfdisk", "versionInfo": "2.42.4-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libfdisk-2.42.4-2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: a81685c2300c1cc9477bb681a5ec22b5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfdisk@2.42.4-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libffi-x86-64", "name": "libffi", "versionInfo": "3.8.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libffi-3.8.0-1.hum1.x86_64.rpm", "licenseDeclared": "MIT AND CC-PDDC AND (GPL-3.0-or-later WITH Texinfo-exception)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 65bf8e21670274a7f1dbf0a731e064c2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libffi@3.8.0-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfido2-x86-64", "name": "libfido2", "versionInfo": "1.17.0-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libfido2-1.17.0-5.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 09d88d35bf7b1fdbe3596964d5a5b4d4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfido2@1.17.0-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfsverity-x86-64", "name": "libfsverity", "versionInfo": "1.7-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libfsverity-1.7-4.hum1.x86_64.rpm", "licenseDeclared": "NOASSERTION", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 714d39cacbaa2869cb8986837cc7c051"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfsverity@1.7-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgcc-x86-64", "name": "libgcc", "versionInfo": "16.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libgcc-16.2.1-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 7f44b3ed25c62af7fca7534bcb5503d9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgcc@16.2.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgcrypt-x86-64", "name": "libgcrypt", "versionInfo": "1.12.4-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libgcrypt-1.12.4-1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND (BSD-3-Clause OR GPL-2.0-only) AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later AND MIT-Modern-Variant", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: ba5c7241a9f431fbaa3a400e72e718b5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgcrypt@1.12.4-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgomp-x86-64", "name": "libgomp", "versionInfo": "16.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libgomp-16.2.1-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 656b1ba106369f9105acf64ed30e33fa"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgomp@16.2.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgpg-error-x86-64", "name": "libgpg-error", "versionInfo": "1.61-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libgpg-error-1.61-2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND (BSD-3-Clause OR LGPL-2.1-or-later) AND FSFULLR AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 3c865a471949c8a9c6cb39d47d8f1352"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgpg-error@1.61-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libidn2-x86-64", "name": "libidn2", "versionInfo": "2.3.8-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libidn2-2.3.8-4.hum1.x86_64.rpm", "licenseDeclared": "(GPL-2.0-or-later OR LGPL-3.0-or-later) AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: a39f7e39430a77e5e372eabb91b997cf"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libidn2@2.3.8-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libksba-x86-64", "name": "libksba", "versionInfo": "1.8.1-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libksba-1.8.1-1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND (LGPL-3.0-or-later OR GPL-2.0-or-later)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 8a1a2babdb3be5ab6fb21a81faf4a89e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libksba@1.8.1-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-liblastlog2-x86-64", "name": "liblastlog2", "versionInfo": "2.42.4-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/liblastlog2-2.42.4-2.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: d3570804b96d92f228f1f6a911247f82"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/liblastlog2@2.42.4-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libmount-x86-64", "name": "libmount", "versionInfo": "2.42.4-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libmount-2.42.4-2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 5d33083ff5b5f7e918f9512a043fdedf"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libmount@2.42.4-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libmpc-x86-64", "name": "libmpc", "versionInfo": "1.4.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libmpc-1.4.1-2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-3.0-or-later AND FSFAP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: a494fa5948db54e21ceab510f4811ce7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libmpc@1.4.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnghttp2-x86-64", "name": "libnghttp2", "versionInfo": "1.69.0-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libnghttp2-1.69.0-6.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 570153fb83d4a122e602ab2d37327109"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnghttp2@1.69.0-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnghttp3-x86-64", "name": "libnghttp3", "versionInfo": "1.18.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libnghttp3-1.18.0-1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 5598615cbe06f72c2a2879a3aaf13699"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnghttp3@1.18.0-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpfm-x86-64", "name": "libpfm", "versionInfo": "4.13.0-20.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/updates/44/Everything/x86_64/Packages/l/libpfm-4.13.0-20.fc44.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 8d3340a34243fe94badf7ab91f89d20c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpfm@4.13.0-20.fc44?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpkgconf-x86-64", "name": "libpkgconf", "versionInfo": "2.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libpkgconf-2.5.1-2.hum1.x86_64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 48c108eef9d6ae92f86afa0832cd5bb9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpkgconf@2.5.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpsl-x86-64", "name": "libpsl", "versionInfo": "0.23.3-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libpsl-0.23.3-1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 3c0aa19bb3308be18f7ed0aba88b547c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpsl@0.23.3-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libselinux-utils-x86-64", "name": "libselinux-utils", "versionInfo": "3.11-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libselinux-utils-3.11-5.hum1.x86_64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 5bebcc7720fa8a5cc86351ed7298f152"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libselinux-utils@3.11-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libselinux-x86-64", "name": "libselinux", "versionInfo": "3.11-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libselinux-3.11-5.hum1.x86_64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: acadf2edec720f9104493928ec56f3cc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libselinux@3.11-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsemanage-x86-64", "name": "libsemanage", "versionInfo": "3.11-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libsemanage-3.11-4.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: efeb1527bdc98b7da6525ff307c93da1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsemanage@3.11-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsepol-x86-64", "name": "libsepol", "versionInfo": "3.11-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libsepol-3.11-2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 39bac19c684ef55d632a47c43bb878c0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsepol@3.11-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsmartcols-x86-64", "name": "libsmartcols", "versionInfo": "2.42.4-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libsmartcols-2.42.4-2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 6f8b172afb63373bf358a537bd36d9b4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsmartcols@2.42.4-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libssh-config-x86-64", "name": "libssh-config", "versionInfo": "0.12.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libssh-config-0.12.2-1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: d450c1e2923e7f1f312fde84f85e7f4c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libssh-config@0.12.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libssh-x86-64", "name": "libssh", "versionInfo": "0.12.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libssh-0.12.2-1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 149536546e1810f679ce19b1be42e58e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libssh@0.12.2-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libstdc++-x86-64", "name": "libstdc++", "versionInfo": "16.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libstdc++-16.2.1-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 786c9eb6cf16e70afac24b687a58a734"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libstdc++@16.2.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtasn1-x86-64", "name": "libtasn1", "versionInfo": "4.21.0-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libtasn1-4.21.0-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: e377a290a5c1a3fe6380be2a69a90fa8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtasn1@4.21.0-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtool-ltdl-x86-64", "name": "libtool-ltdl", "versionInfo": "2.6.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libtool-ltdl-2.6.2-1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later WITH Libtool-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: a9ed4aa2151ed699399cc61202353b8b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtool-ltdl@2.6.2-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libunistring-x86-64", "name": "libunistring", "versionInfo": "1.1-12.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libunistring-1.1-12.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 1cc5ed6dc9abd644761b1394fa848349"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libunistring@1.1-12.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libusb1-x86-64", "name": "libusb1", "versionInfo": "1.0.30-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libusb1-1.0.30-2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 7e5e59833d66366a60c5c01481be2c39"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libusb1@1.0.30-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libuuid-x86-64", "name": "libuuid", "versionInfo": "2.42.4-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libuuid-2.42.4-2.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 71b7f0b521164d81af4d76b44328b355"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libuuid@2.42.4-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libverto-x86-64", "name": "libverto", "versionInfo": "0.3.2-13.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libverto-0.3.2-13.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 1e2d449e326eb9c384e7665561d3bf59"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libverto@0.3.2-13.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxcrypt-devel-x86-64", "name": "libxcrypt-devel", "versionInfo": "4.5.2-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libxcrypt-devel-4.5.2-4.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND BSD-3-Clause AND BSD-2-Clause AND BSD-2-Clause-FreeBSD AND 0BSD AND CC0-1.0 AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 261f1e66c301bcc529593d9044eddcec"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxcrypt-devel@4.5.2-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxcrypt-x86-64", "name": "libxcrypt", "versionInfo": "4.5.2-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libxcrypt-4.5.2-4.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND BSD-3-Clause AND BSD-2-Clause AND BSD-2-Clause-FreeBSD AND 0BSD AND CC0-1.0 AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 186f5d91cd0fb2f9753f3859f2eaca00"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxcrypt@4.5.2-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxml2-16-x86-64", "name": "libxml2-16", "versionInfo": "2.15.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libxml2-16-2.15.4-1.1.hum1.x86_64.rpm", "licenseDeclared": "MIT AND ISC-Veillard AND W3C", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: ac5f893567b6507c793d9abd9a405539"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxml2-16@2.15.4-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libzstd-x86-64", "name": "libzstd", "versionInfo": "1.5.7-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libzstd-1.5.7-6.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: d3302b977dc6fd5cb29412a7d358541d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libzstd@1.5.7-6.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-linkdupes-x86-64", "name": "linkdupes", "versionInfo": "0.7.3-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/linkdupes-0.7.3-3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND MIT AND Unicode-DFS-2016 AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND (MIT OR Zlib OR Apache-2.0) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: e839cebae2f671496325846256147325"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/linkdupes@0.7.3-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lua-libs-x86-64", "name": "lua-libs", "versionInfo": "5.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/lua-libs-5.5.1-2.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 202aef337d9998f9b16c9b81b42d4744"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lua-libs@5.5.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lua-srpm-macros-x86-64", "name": "lua-srpm-macros", "versionInfo": "1-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/lua-srpm-macros-1-18.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 68293f00751e1bc423b0bb2ac4e21221"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lua-srpm-macros@1-18.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lz4-libs-x86-64", "name": "lz4-libs", "versionInfo": "1.10.0-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/lz4-libs-1.10.0-5.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 9d26849f5c070c53a3c0eb03d2a7b3da"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lz4-libs@1.10.0-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-make-x86-64", "name": "make", "versionInfo": "1:4.4.1-13.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/m/make-4.4.1-13.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND GFDL-1.3-or-later AND FSFULLR", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 92552a7aafadab8f8658b13554c85a7b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/make@4.4.1-13.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-meson-srpm-macros-x86-64", "name": "meson-srpm-macros", "versionInfo": "1.12.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/m/meson-srpm-macros-1.12.1-2.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 7617c98560a327b943961c400248f04b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/meson-srpm-macros@1.12.1-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-mpdecimal-x86-64", "name": "mpdecimal", "versionInfo": "4.0.1-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/m/mpdecimal-4.0.1-4.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 2510cb8c8936230f7136343d313013d6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/mpdecimal@4.0.1-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-mpfr-x86-64", "name": "mpfr", "versionInfo": "4.2.2-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/m/mpfr-4.2.2-4.hum1.x86_64.rpm", "licenseDeclared": "LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 9b7d4b17e85c5c2a31eb4ff1071f1f11"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/mpfr@4.2.2-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ncurses-base-x86-64", "name": "ncurses-base", "versionInfo": "6.6-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/ncurses-base-6.6-3.hum1.noarch.rpm", "licenseDeclared": "MIT-open-group", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: ed0ef2d0c09ab58d4a094bde95e77d32"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ncurses-base@6.6-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ncurses-libs-x86-64", "name": "ncurses-libs", "versionInfo": "6.6-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/ncurses-libs-6.6-3.hum1.x86_64.rpm", "licenseDeclared": "MIT-open-group", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 1f7dd08e1f7f3a21dea4d74150ca7e90"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ncurses-libs@6.6-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-nettle-x86-64", "name": "nettle", "versionInfo": "4.0-5.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/nettle-4.0-5.2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-3.0-or-later OR GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: dec047659ca3ed7f2ade5edb5417768e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/nettle@4.0-5.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ngtcp2-crypto-ossl-x86-64", "name": "ngtcp2-crypto-ossl", "versionInfo": "1.22.1-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/ngtcp2-crypto-ossl-1.22.1-3.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: ce32706efbf4cd25374b30a8c35c8b33"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ngtcp2-crypto-ossl@1.22.1-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ngtcp2-x86-64", "name": "ngtcp2", "versionInfo": "1.22.1-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/ngtcp2-1.22.1-3.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 53eeed67908e3a4eb1daa0c352dd6c6d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ngtcp2@1.22.1-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-npth-x86-64", "name": "npth", "versionInfo": "1.8-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/npth-1.8-5.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 79832c509c9ece7d8af6a7967f6c6d36"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/npth@1.8-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ocaml-srpm-macros-x86-64", "name": "ocaml-srpm-macros", "versionInfo": "11-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/ocaml-srpm-macros-11-4.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 6d563b597c552c5ce842bdd83b6d8dd1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ocaml-srpm-macros@11-4.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openblas-srpm-macros-x86-64", "name": "openblas-srpm-macros", "versionInfo": "2-21.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/openblas-srpm-macros-2-21.1.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 0186a0c89857458e74eb7e3aec24f7f1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openblas-srpm-macros@2-21.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openldap-x86-64", "name": "openldap", "versionInfo": "2.6.13-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/openldap-2.6.13-4.hum1.x86_64.rpm", "licenseDeclared": "OLDAP-2.8", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: a2d4cf9dfcc75dc0b1203812c66474a7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openldap@2.6.13-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssl-fips-provider-upstream-x86-64", "name": "openssl-fips-provider-upstream", "versionInfo": "1:3.5.9-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/openssl-fips-provider-upstream-3.5.9-0.1.hum1.x86_64.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 159e86bd0ef6a7a96ef661da8d11b1ea"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssl-fips-provider-upstream@3.5.9-0.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssl-libs-x86-64", "name": "openssl-libs", "versionInfo": "1:3.5.9-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/openssl-libs-3.5.9-0.1.hum1.x86_64.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 75ff8c89ad02f0fe16ba278f56a3f753"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssl-libs@3.5.9-0.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-p11-kit-trust-x86-64", "name": "p11-kit-trust", "versionInfo": "0.26.5-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/p11-kit-trust-0.26.5-1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 68257f4d7431d3b1885712f25b4f5058"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/p11-kit-trust@0.26.5-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-p11-kit-x86-64", "name": "p11-kit", "versionInfo": "0.26.5-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/p11-kit-0.26.5-1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 75311ea12371b64af16c0e5594ded602"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/p11-kit@0.26.5-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-package-notes-srpm-macros-x86-64", "name": "package-notes-srpm-macros", "versionInfo": "0.20-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/package-notes-srpm-macros-0.20-2.hum1.noarch.rpm", "licenseDeclared": "0BSD", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 4f6f48e6009eb2455ec194f477f9b058"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/package-notes-srpm-macros@0.20-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pam-libs-x86-64", "name": "pam-libs", "versionInfo": "1.7.2-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pam-libs-1.7.2-4.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: fca8dc3ed64b8bdc9ea406b714989970"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pam-libs@1.7.2-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-patch-x86-64", "name": "patch", "versionInfo": "2.8-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/patch-2.8-5.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 0ae052d45ed91aae4aa901512b427f23"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/patch@2.8-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-syntax-x86-64", "name": "pcre2-syntax", "versionInfo": "10.48-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pcre2-syntax-10.48-0.1.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 064cc86298c67eb327b2193c916d494f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2-syntax@10.48-0.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-x86-64", "name": "pcre2", "versionInfo": "10.48-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pcre2-10.48-0.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 21d54a0ebfc4eb214e9e42ec21a6d641"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2@10.48-0.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-perl-srpm-macros-x86-64", "name": "perl-srpm-macros", "versionInfo": "1-65.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/perl-srpm-macros-1-65.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 0f8b16c4e63430bcff87cb49fa941740"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/perl-srpm-macros@1-65.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-m4-x86-64", "name": "pkgconf-m4", "versionInfo": "2.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pkgconf-m4-2.5.1-2.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later WITH Autoconf-exception-generic", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: e013238a36bb9fbc1d2ca514dddd4ca8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf-m4@2.5.1-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-pkg-config-x86-64", "name": "pkgconf-pkg-config", "versionInfo": "2.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pkgconf-pkg-config-2.5.1-2.hum1.x86_64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: a635242970269a96004c1698d505cbee"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf-pkg-config@2.5.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-x86-64", "name": "pkgconf", "versionInfo": "2.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pkgconf-2.5.1-2.hum1.x86_64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 5e1ba23c3274edeebb8a40e9f93deded"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf@2.5.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-policycoreutils-x86-64", "name": "policycoreutils", "versionInfo": "3.11-2.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/policycoreutils-3.11-2.2.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: bf26428f065424fee3e871b1ca1dfb69"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/policycoreutils@3.11-2.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-popt-x86-64", "name": "popt", "versionInfo": "1.19-11.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/popt-1.19-11.1.hum1.x86_64.rpm", "licenseDeclared": "MIT AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 3770c5ab4a851a9ca25915a7894f54c3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/popt@1.19-11.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-publicsuffix-list-dafsa-x86-64", "name": "publicsuffix-list-dafsa", "versionInfo": "20260624-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/publicsuffix-list-dafsa-20260624-2.hum1.noarch.rpm", "licenseDeclared": "MPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: c616882fad65cf900d2280a38cdcae6d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/publicsuffix-list-dafsa@20260624-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pyproject-srpm-macros-x86-64", "name": "pyproject-srpm-macros", "versionInfo": "1.23.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pyproject-srpm-macros-1.23.2-1.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: e82edc55e5be2f520af44c2b0337e92a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pyproject-srpm-macros@1.23.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python-pip-wheel-x86-64", "name": "python-pip-wheel", "versionInfo": "26.2-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/python-pip-wheel-26.2-0.1.hum1.noarch.rpm", "licenseDeclared": "MIT AND Python-2.0.1 AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MPL-2.0 AND (Apache-2.0 OR BSD-2-Clause)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 9dcd29a0499e6ffefbb360de90d31851"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python-pip-wheel@26.2-0.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python-srpm-macros-x86-64", "name": "python-srpm-macros", "versionInfo": "3.14-12.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/python-srpm-macros-3.14-12.2.hum1.noarch.rpm", "licenseDeclared": "MIT AND PSF-2.0 AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 618d0c006548a702f22df8ec49dca3a5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python-srpm-macros@3.14-12.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-boolean.py-x86-64", "name": "python3-boolean.py", "versionInfo": "5.0-10.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/p/python3-boolean.py-5.0-10.fc44.noarch.rpm", "licenseDeclared": "NOASSERTION", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: b7af00dcc3668fd56d3b09f1f1b171a9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-boolean.py@5.0-10.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-libs-x86-64", "name": "python3-libs", "versionInfo": "3.14.7-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/python3-libs-3.14.7-1.2.hum1.x86_64.rpm", "licenseDeclared": "Python-2.0.1 AND MIT AND BSD-3-Clause AND MIT-CMU AND HPND-SMC AND BSD-2-Clause AND dtoa AND Unicode-3.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: cdeb1b6dea9c717030e20bc62bc88dbc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-libs@3.14.7-1.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-license-expression-x86-64", "name": "python3-license-expression", "versionInfo": "30.4.4-4.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/p/python3-license-expression-30.4.4-4.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 009ffab3cc792b96ce398d6c97aa5a0a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-license-expression@30.4.4-4.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-x86-64", "name": "python3", "versionInfo": "3.14.7-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/python3-3.14.7-1.2.hum1.x86_64.rpm", "licenseDeclared": "Python-2.0.1", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: ef29fbdefb5780e5b1de6c1be93fd2b1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3@3.14.7-1.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-qt5-srpm-macros-x86-64", "name": "qt5-srpm-macros", "versionInfo": "5.15.18-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/q/qt5-srpm-macros-5.15.18-3.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 38abd8c7f1184339bff7ddf1044f1b7d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/qt5-srpm-macros@5.15.18-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-qt6-srpm-macros-x86-64", "name": "qt6-srpm-macros", "versionInfo": "6.11.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/q/qt6-srpm-macros-6.11.2-1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 8684a2b8276c41d1e69ef971a6b044b3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/qt6-srpm-macros@6.11.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-readline-x86-64", "name": "readline", "versionInfo": "8.3-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/readline-8.3-6.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: dad256ab45b2ff28db082647e11ab463"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/readline@8.3-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-redhat-rpm-config-x86-64", "name": "redhat-rpm-config", "versionInfo": "345-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/redhat-rpm-config-345-4.hum1.noarch.rpm", "licenseDeclared": "GPL-1.0-or-later AND GPL-2.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 9e9b9de801d40d8b16d77058da82cde9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/redhat-rpm-config@345-4.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-build-libs-x86-64", "name": "rpm-build-libs", "versionInfo": "6.1.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-build-libs-6.1.0-1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 7c49dce4691dd72dc1cfc25a2d162c4b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-build-libs@6.1.0-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-build-x86-64", "name": "rpm-build", "versionInfo": "6.1.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-build-6.1.0-1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 37689ff70249d086b92fdc76d680334c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-build@6.1.0-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-libs-x86-64", "name": "rpm-libs", "versionInfo": "6.1.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-libs-6.1.0-1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: b99370ea9d0875a4e49a619086b62b2e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-libs@6.1.0-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-plugin-selinux-x86-64", "name": "rpm-plugin-selinux", "versionInfo": "6.1.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-plugin-selinux-6.1.0-1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 60519cfd555eb2f40efb25afcc4dad79"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-plugin-selinux@6.1.0-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-sequoia-x86-64", "name": "rpm-sequoia", "versionInfo": "1.10.1.1-1.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-sequoia-1.10.1.1-1.4.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later AND Apache-2.0 AND BSL-1.0 AND MIT AND Unicode-DFS-2016 AND (Apache-2.0 OR MIT) AND (MIT OR Apache-2.0 OR Zlib) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: f8aaccff474ac2e0fb7c916a2869ae15"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-sequoia@1.10.1.1-1.4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-sign-libs-x86-64", "name": "rpm-sign-libs", "versionInfo": "6.1.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-sign-libs-6.1.0-1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: c7533ff6f9f07193fe4bf53331d520f6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-sign-libs@6.1.0-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-x86-64", "name": "rpm", "versionInfo": "6.1.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-6.1.0-1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: b5ba04aec50fdc3f2ba70d4e8513d626"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm@6.1.0-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rust-srpm-macros-x86-64", "name": "rust-srpm-macros", "versionInfo": "28.5-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rust-srpm-macros-28.5-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 606a7a2166723ba0e3515fa8244596dc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rust-srpm-macros@28.5-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sed-x86-64", "name": "sed", "versionInfo": "4.10-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/sed-4.10-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: a4c743d0bd5c5abe0e89da9d7acb245d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sed@4.10-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-selinux-policy-targeted-x86-64", "name": "selinux-policy-targeted", "versionInfo": "45.20-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/selinux-policy-targeted-45.20-1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: da1ab75642b93136f12d0daeb5192e61"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/selinux-policy-targeted@45.20-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-selinux-policy-x86-64", "name": "selinux-policy", "versionInfo": "45.20-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/selinux-policy-45.20-1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 9a69b28791e2e3905fc04853edf11a21"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/selinux-policy@45.20-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-setup-x86-64", "name": "setup", "versionInfo": "2.15.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/setup-2.15.1-2.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 7a592a3640b848d6c4480ef947a4d907"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/setup@2.15.1-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-shadow-utils-x86-64", "name": "shadow-utils", "versionInfo": "2:4.20.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/shadow-utils-4.20.0-1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 052953675603b8650e5d97c0f5faa6e2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/shadow-utils@4.20.0-1.hum1?arch=x86_64&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sqlite-libs-x86-64", "name": "sqlite-libs", "versionInfo": "3.53.4-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/sqlite-libs-3.53.4-1.hum1.x86_64.rpm", "licenseDeclared": "blessing", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: b61e6927000756f1a7453e0ef6f79487"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sqlite-libs@3.53.4-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-libs-x86-64", "name": "systemd-libs", "versionInfo": "261.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/systemd-libs-261.2-1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: c329708277b41fa5c79182b97dcd05ab"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-libs@261.2-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-standalone-sysusers-x86-64", "name": "systemd-standalone-sysusers", "versionInfo": "261.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/systemd-standalone-sysusers-261.2-1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 1c7264a08531500bedc072ac1026a49f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-standalone-sysusers@261.2-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tar-x86-64", "name": "tar", "versionInfo": "2:1.35-10.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/t/tar-1.35-10.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 2d9125f5ec73e194627aa82d115edf46"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tar@1.35-10.hum1?arch=x86_64&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tpm2-tss-x86-64", "name": "tpm2-tss", "versionInfo": "4.2.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/t/tpm2-tss-4.2.0-1.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 6e3945fdad8b17446f10429d0f919de6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tpm2-tss@4.2.0-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tree-sitter-srpm-macros-x86-64", "name": "tree-sitter-srpm-macros", "versionInfo": "0.4.6-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/t/tree-sitter-srpm-macros-0.4.6-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: f65af17df28df341ec383338fcc47481"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tree-sitter-srpm-macros@0.4.6-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tzdata-x86-64", "name": "tzdata", "versionInfo": "2026c-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/t/tzdata-2026c-2.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain AND (GPL-2.0-only WITH ClassPath-exception-2.0)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: a7e227263e697ecc5c439df169c1c4d3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tzdata@2026c-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-unzip-x86-64", "name": "unzip", "versionInfo": "6.0-71.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/u/unzip-6.0-71.hum1.x86_64.rpm", "licenseDeclared": "Info-ZIP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: bfc5ab20d40fbc285e5344ad03457851"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/unzip@6.0-71.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-util-linux-core-x86-64", "name": "util-linux-core", "versionInfo": "2.42.4-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/u/util-linux-core-2.42.4-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: e5aafb401b07d6231575e41c5efc079a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/util-linux-core@2.42.4-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-util-linux-x86-64", "name": "util-linux", "versionInfo": "2.42.4-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/u/util-linux-2.42.4-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-1.0-or-later AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 5cb1ad89efad3bcf47874e3efe393daa"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/util-linux@2.42.4-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-which-x86-64", "name": "which", "versionInfo": "2.25-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/w/which-2.25-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 593fc46299e5b9f11865ad0a81def554"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/which@2.25-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xxhash-libs-x86-64", "name": "xxhash-libs", "versionInfo": "0.8.4-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/x/xxhash-libs-0.8.4-1.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 59dce6a6a1bf72d48f4891b434cae74e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xxhash-libs@0.8.4-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xz-libs-x86-64", "name": "xz-libs", "versionInfo": "1:5.8.4-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/x/xz-libs-5.8.4-1.hum1.x86_64.rpm", "licenseDeclared": "0BSD", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 24f22e28fef5533d5e1ea372b3a1174d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xz-libs@5.8.4-1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xz-x86-64", "name": "xz", "versionInfo": "1:5.8.4-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/x/xz-5.8.4-1.hum1.x86_64.rpm", "licenseDeclared": "0BSD AND GPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 958a6058516bc6535aaca4bfb2e3e9de"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xz@5.8.4-1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zig-srpm-macros-x86-64", "name": "zig-srpm-macros", "versionInfo": "1-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/z/zig-srpm-macros-1-9.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 0c226eb1fa4d5fc3d272055b6397b077"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zig-srpm-macros@1-9.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zip-x86-64", "name": "zip", "versionInfo": "3.0-45.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/z/zip-3.0-45.1.hum1.x86_64.rpm", "licenseDeclared": "Info-ZIP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: c96ff9d3553ddb968b19aad8fff223e9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zip@3.0-45.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zlib-ng-compat-x86-64", "name": "zlib-ng-compat", "versionInfo": "2.3.3-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/z/zlib-ng-compat-2.3.3-6.hum1.x86_64.rpm", "licenseDeclared": "Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 1afc93af70228a741ab127580f779159"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zlib-ng-compat@2.3.3-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zstd-x86-64", "name": "zstd", "versionInfo": "1.5.7-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/z/zstd-1.5.7-6.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-01T15:53:09Z", "comment": "sigmd5: 593ee2b10e36abc9883e112101c9b0aa"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zstd@1.5.7-6.1.hum1?arch=x86_64"}]}, {"name": "cloud.google.com/go/auth", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-auth-a34e52240c4cd8a4", "versionInfo": "v0.23.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:auth:v0.23.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/auth@v0.23.3"}]}, {"name": "cloud.google.com/go/auth/oauth2adapt", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-bbe7343413c52d03", "versionInfo": "v0.2.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:auth\\/oauth2adapt:v0.2.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/auth@v0.2.8#oauth2adapt"}]}, {"name": "cloud.google.com/go/compute/metadata", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-4f9ba7d92050fd80", "versionInfo": "v0.10.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:compute\\/metadata:v0.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/compute@v0.10.0#metadata"}]}, {"name": "github.com/a8m/envsubst", "SPDXID": "SPDXRef-Package-go-module-github.com-a8m-envsubst-f75fccb262c09c7a", "versionInfo": "v1.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:a8m:envsubst:v1.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/a8m/envsubst@v1.4.3"}]}, {"name": "github.com/beorn7/perks", "SPDXID": "SPDXRef-Package-go-module-github.com-beorn7-perks-443417a163ba4ee8", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:beorn7:perks:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/beorn7/perks@v1.0.1"}]}, {"name": "github.com/bitly/go-simplejson", "SPDXID": "SPDXRef-Package-go-module-github.com-bitly-go-simplejson-f9e4eaf46c56ae6a", "versionInfo": "v0.5.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bitly:go-simplejson:v0.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bitly:go_simplejson:v0.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bitly/go-simplejson@v0.5.1"}]}, {"name": "github.com/bsm/redislock", "SPDXID": "SPDXRef-Package-go-module-github.com-bsm-redislock-55a82de9e152d1cd", "versionInfo": "v0.10.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bsm:redislock:v0.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bsm/redislock@v0.10.0"}]}, {"name": "github.com/cespare/xxhash/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-67e2658d150ee426", "versionInfo": "v2.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cespare/xxhash@v2.3.0#v2"}]}, {"name": "github.com/coreos/go-oidc/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-coreos-go-oidc-v3-9b3f81944e9acbc3", "versionInfo": "v3.21.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go-oidc\\/v3:v3.21.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go_oidc\\/v3:v3.21.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/coreos/go-oidc@v3.21.0#v3"}]}, {"name": "github.com/coreos/go-systemd", "SPDXID": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-33255e57fa255f7e", "versionInfo": "v0.0.0-20191104093116-d3cd4ed1dbcf", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go-systemd:v0.0.0-20191104093116-d3cd4ed1dbcf:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go_systemd:v0.0.0-20191104093116-d3cd4ed1dbcf:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/coreos/go-systemd@v0.0.0-20191104093116-d3cd4ed1dbcf"}]}, {"name": "github.com/felixge/httpsnoop", "SPDXID": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-280dfb911707b75b", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:felixge:httpsnoop:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/felixge/httpsnoop@v1.1.0"}]}, {"name": "github.com/fsnotify/fsnotify", "SPDXID": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-f32fe5cc5bec0cb7", "versionInfo": "v1.10.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fsnotify:fsnotify:v1.10.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fsnotify/fsnotify@v1.10.1"}]}, {"name": "github.com/go-jose/go-jose/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v3-6b557d298c52b46d", "versionInfo": "v3.0.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go-jose\\/v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go_jose\\/v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go-jose\\/v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go_jose\\/v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-jose\\/v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_jose\\/v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-jose/go-jose@v3.0.5#v3"}]}, {"name": "github.com/go-jose/go-jose/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-3a1b78383c78f2ff", "versionInfo": "v4.1.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go-jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go_jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go-jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go_jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-jose/go-jose@v4.1.5#v4"}]}, {"name": "github.com/go-logr/logr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-logr-3128efecf2c3c59c", "versionInfo": "v1.4.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:logr:v1.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:logr:v1.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:logr:v1.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/logr@v1.4.4"}]}, {"name": "github.com/go-logr/stdr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-stdr-c79227cb089c32ae", "versionInfo": "v1.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/stdr@v1.2.2"}]}, {"name": "github.com/go-viper/mapstructure/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-cbb90ab15138faf2", "versionInfo": "v2.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-viper/mapstructure@v2.5.0#v2"}]}, {"name": "github.com/golang-jwt/jwt/v5", "SPDXID": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-be0608faa4df0d67", "versionInfo": "v5.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang-jwt:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang_jwt:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/golang-jwt/jwt@v5.3.1#v5"}]}, {"name": "github.com/google/s2a-go", "SPDXID": "SPDXRef-Package-go-module-github.com-google-s2a-go-4adbc4acc276fe63", "versionInfo": "v0.1.10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:s2a-go:v0.1.10:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:s2a_go:v0.1.10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/s2a-go@v0.1.10"}]}, {"name": "github.com/google/uuid", "SPDXID": "SPDXRef-Package-go-module-github.com-google-uuid-cc833e1ed2c1dcff", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/uuid@v1.6.0"}]}, {"name": "github.com/googleapis/enterprise-certificate-proxy", "SPDXID": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-1f3c8a5c21fd4bf4", "versionInfo": "v0.3.22", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:enterprise-certificate-proxy:v0.3.22:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:enterprise_certificate_proxy:v0.3.22:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.22"}]}, {"name": "github.com/googleapis/gax-go/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-2166ea786e2aa958", "versionInfo": "v2.24.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:gax-go\\/v2:v2.24.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:gax_go\\/v2:v2.24.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/googleapis/gax-go@v2.24.1#v2"}]}, {"name": "github.com/gorilla/mux", "SPDXID": "SPDXRef-Package-go-module-github.com-gorilla-mux-9774676626ac4591", "versionInfo": "v1.8.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gorilla:mux:v1.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gorilla/mux@v1.8.1"}]}, {"name": "github.com/justinas/alice", "SPDXID": "SPDXRef-Package-go-module-github.com-justinas-alice-88d3eeb7d3076538", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:justinas:alice:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/justinas/alice@v1.2.0"}]}, {"name": "github.com/munnerz/goautoneg", "SPDXID": "SPDXRef-Package-go-module-github.com-munnerz-goautoneg-447190b0d258ce9a", "versionInfo": "v0.0.0-20191010083416-a7dc8b61c822", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:munnerz:goautoneg:v0.0.0-20191010083416-a7dc8b61c822:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822"}]}, {"name": "github.com/oauth2-proxy/oauth2-proxy/v7", "SPDXID": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "versionInfo": "UNKNOWN", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2-proxy:oauth2-proxy\\/v7:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2-proxy:oauth2_proxy\\/v7:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2_proxy:oauth2-proxy\\/v7:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2_proxy:oauth2_proxy\\/v7:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2:oauth2-proxy\\/v7:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2:oauth2_proxy\\/v7:*:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/oauth2-proxy/oauth2-proxy#v7"}]}, {"name": "github.com/pelletier/go-toml/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-e8f7701c35318468", "versionInfo": "v2.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pelletier:go-toml\\/v2:v2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pelletier:go_toml\\/v2:v2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pelletier/go-toml@v2.4.3#v2"}]}, {"name": "github.com/pierrec/lz4/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-84dba51e0c474cbc", "versionInfo": "v4.1.31", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pierrec:lz4\\/v4:v4.1.31:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pierrec/lz4@v4.1.31#v4"}]}, {"name": "github.com/prometheus/client_golang", "SPDXID": "SPDXRef-Package-go-module-github.com-prometheus-client-golang-23c9349b1cd4e7b3", "versionInfo": "v1.24.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:client-golang:v1.24.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:client_golang:v1.24.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/prometheus/client_golang@v1.24.1"}]}, {"name": "github.com/prometheus/client_model", "SPDXID": "SPDXRef-Package-go-module-github.com-prometheus-client-model-5db8f01f19e531ef", "versionInfo": "v0.6.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:client-model:v0.6.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:client_model:v0.6.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/prometheus/client_model@v0.6.2"}]}, {"name": "github.com/prometheus/common", "SPDXID": "SPDXRef-Package-go-module-github.com-prometheus-common-33b25ff75d48adce", "versionInfo": "v0.70.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:common:v0.70.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/prometheus/common@v0.70.1"}]}, {"name": "github.com/prometheus/procfs", "SPDXID": "SPDXRef-Package-go-module-github.com-prometheus-procfs-ddc3b784d40f8d23", "versionInfo": "v0.21.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:procfs:v0.21.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/prometheus/procfs@v0.21.1"}]}, {"name": "github.com/redis/go-redis/v9", "SPDXID": "SPDXRef-Package-go-module-github.com-redis-go-redis-v9-2445e1c6720f51cb", "versionInfo": "v9.22.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:redis:go-redis\\/v9:v9.22.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:redis:go_redis\\/v9:v9.22.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/redis/go-redis@v9.22.0#v9"}]}, {"name": "github.com/sagikazarmark/locafero", "SPDXID": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-a85c2006648aa9d7", "versionInfo": "v0.12.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sagikazarmark:locafero:v0.12.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sagikazarmark/locafero@v0.12.0"}]}, {"name": "github.com/spf13/afero", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-afero-41bd0670885f6228", "versionInfo": "v1.15.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:afero:v1.15.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/afero@v1.15.0"}]}, {"name": "github.com/spf13/cast", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-cast-2bf5afaa597368f2", "versionInfo": "v1.10.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:cast:v1.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/cast@v1.10.0"}]}, {"name": "github.com/spf13/pflag", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-pflag-6f49a2ebbc498a59", "versionInfo": "v1.0.10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:pflag:v1.0.10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/pflag@v1.0.10"}]}, {"name": "github.com/spf13/viper", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-viper-621921ec50041f89", "versionInfo": "v1.21.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:viper:v1.21.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/viper@v1.21.0"}]}, {"name": "github.com/subosito/gotenv", "SPDXID": "SPDXRef-Package-go-module-github.com-subosito-gotenv-d34968d89be4ce38", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:subosito:gotenv:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/subosito/gotenv@v1.6.0"}]}, {"name": "github.com/vmihailenco/msgpack/v5", "SPDXID": "SPDXRef-Package-go-module-github.com-vmihailenco-msgpack-v5-96e5e66fb2c3052b", "versionInfo": "v5.4.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vmihailenco:msgpack\\/v5:v5.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vmihailenco/msgpack@v5.4.1#v5"}]}, {"name": "github.com/vmihailenco/tagparser/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-vmihailenco-tagparser-v2-6bd3f82ee3a7af2c", "versionInfo": "v2.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vmihailenco:tagparser\\/v2:v2.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vmihailenco/tagparser@v2.0.0#v2"}]}, {"name": "go.opentelemetry.io/auto/sdk", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-a9396e0595349589", "versionInfo": "v1.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:auto:sdk:v1.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1"}]}, {"name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-f1c6b1e239e9db0a", "versionInfo": "v0.70.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/otelhttp:v0.70.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation@v0.70.0#net/http/otelhttp"}]}, {"name": "go.opentelemetry.io/otel", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-ddd26bccda51578c", "versionInfo": "v1.45.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel@v1.45.0"}]}, {"name": "go.opentelemetry.io/otel/metric", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-b7bf563bb95010c0", "versionInfo": "v1.45.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:metric:v1.45.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/metric@v1.45.0"}]}, {"name": "go.opentelemetry.io/otel/trace", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-1e07a409f55b51cc", "versionInfo": "v1.45.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:trace:v1.45.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/trace@v1.45.0"}]}, {"name": "go.uber.org/atomic", "SPDXID": "SPDXRef-Package-go-module-go.uber.org-atomic-0179ccd25c7cfc3c", "versionInfo": "v1.11.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.uber.org/atomic@v1.11.0"}]}, {"name": "go.yaml.in/yaml/v3", "SPDXID": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-311c5e4737dc5f46", "versionInfo": "v3.0.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml:v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.yaml.in/yaml/v3@v3.0.5"}]}, {"name": "golang.org/x/crypto", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-crypto-35c8f605b1a8788a", "versionInfo": "v0.57.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:ssh:v0.57.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/crypto@v0.57.0"}]}, {"name": "golang.org/x/net", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-net-64cb08a067d483e6", "versionInfo": "v0.59.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:networking:v0.59.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/net@v0.59.0"}]}, {"name": "golang.org/x/oauth2", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-oauth2-e02f1abd961bcad0", "versionInfo": "v0.37.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/oauth2:v0.37.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/oauth2@v0.37.0"}]}, {"name": "golang.org/x/sync", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sync-59ab029f98086e04", "versionInfo": "v0.23.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sync:v0.23.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sync@v0.23.0"}]}, {"name": "golang.org/x/sys", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sys-02a66289ca81571e", "versionInfo": "v0.48.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sys:v0.48.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sys@v0.48.0"}]}, {"name": "golang.org/x/text", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-text-c109651cf85a8054", "versionInfo": "v0.42.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:text:v0.42.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/text@v0.42.0"}]}, {"name": "google.golang.org/api", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-api-8a72a5928558c897", "versionInfo": "v0.299.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:api:v0.299.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/api@v0.299.0"}]}, {"name": "google.golang.org/genproto/googleapis/rpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-54a7022d4fc18b33", "versionInfo": "v0.0.0-20260921155816-b14227669459", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260921155816-b14227669459:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260921155816-b14227669459#rpc"}]}, {"name": "google.golang.org/grpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-grpc-dcae5cbd284a6c85", "versionInfo": "v1.84.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:grpc:v1.84.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/grpc@v1.84.0"}]}, {"name": "google.golang.org/protobuf", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-protobuf-3b648a627d596017", "versionInfo": "v1.36.12", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:protobuf:v1.36.12:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/protobuf@v1.36.12"}]}, {"name": "gopkg.in/natefinch/lumberjack.v2", "SPDXID": "SPDXRef-Package-go-module-gopkg.in-natefinch-lumberjack.v2-b8cd966ac2420c1f", "versionInfo": "v2.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/gopkg.in/natefinch/lumberjack.v2@v2.2.1"}]}, {"name": "oauth2-proxy", "SPDXID": "SPDXRef-Package-rpm-oauth2-proxy-da0d110d71b7ee84", "versionInfo": "7.15.5-0.1.hum1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from RPM DB: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2-proxy:oauth2-proxy:7.15.5-0.1.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2-proxy:oauth2_proxy:7.15.5-0.1.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2_proxy:oauth2-proxy:7.15.5-0.1.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2_proxy:oauth2_proxy:7.15.5-0.1.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2:oauth2-proxy:7.15.5-0.1.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2:oauth2_proxy:7.15.5-0.1.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/hummingbird/oauth2-proxy@7.15.5-0.1.hum1?distro=hummingbird-1"}]}, {"name": "stdlib", "SPDXID": "SPDXRef-Package-go-module-stdlib-2c42485889b8fda2", "versionInfo": "go1.27.1-X:nodwarf5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:go:1.27.1:-:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/stdlib@1.27.1-X%3Anodwarf5"}]}, {"name": "rpm-extracted/oauth2-proxy-7.15.5-0.1.hum1.aarch64", "SPDXID": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "actions/checkout", "SPDXID": "SPDXRef-Package-github-action-actions-checkout-35e2a1bf4f6b0a82", "versionInfo": "v7.0.1", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /oauth2-proxy-7.15.5/.github/workflows/ci.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/checkout@v7.0.1"}]}, {"name": "actions/checkout", "SPDXID": "SPDXRef-Package-github-action-actions-checkout-f66f7ddb8f79f50e", "versionInfo": "v7.0.1", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /oauth2-proxy-7.15.5/.github/workflows/codeql.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/checkout@v7.0.1"}]}, {"name": "actions/checkout", "SPDXID": "SPDXRef-Package-github-action-actions-checkout-e336aa4707aad530", "versionInfo": "v7.0.1", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /oauth2-proxy-7.15.5/.github/workflows/create-release.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/checkout@v7.0.1"}]}, {"name": "actions/checkout", "SPDXID": "SPDXRef-Package-github-action-actions-checkout-6bfd576f59412e31", "versionInfo": "v7.0.1", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /oauth2-proxy-7.15.5/.github/workflows/docs.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/checkout@v7.0.1"}]}, {"name": "actions/checkout", "SPDXID": "SPDXRef-Package-github-action-actions-checkout-b9dd365bfef5ae7a", "versionInfo": "v7.0.1", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /oauth2-proxy-7.15.5/.github/workflows/nightly.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/checkout@v7.0.1"}]}, {"name": "actions/checkout", "SPDXID": "SPDXRef-Package-github-action-actions-checkout-e22b886a617c0765", "versionInfo": "v7.0.1", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /oauth2-proxy-7.15.5/.github/workflows/publish-release.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/checkout@v7.0.1"}]}, {"name": "actions/configure-pages", "SPDXID": "SPDXRef-Package-github-action-actions-configure-pages-82d6211ad35df606", "versionInfo": "v6.0.0", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /oauth2-proxy-7.15.5/.github/workflows/docs.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/configure-pages:actions\\/configure-pages:v6.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/configure-pages:actions\\/configure_pages:v6.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/configure_pages:actions\\/configure-pages:v6.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/configure_pages:actions\\/configure_pages:v6.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/configure:actions\\/configure-pages:v6.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/configure:actions\\/configure_pages:v6.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/configure-pages@v6.0.0"}]}, {"name": "actions/deploy-pages", "SPDXID": "SPDXRef-Package-github-action-actions-deploy-pages-7dcf43534c68e123", "versionInfo": "v5.0.0", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /oauth2-proxy-7.15.5/.github/workflows/docs.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/deploy-pages:actions\\/deploy-pages:v5.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/deploy-pages:actions\\/deploy_pages:v5.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/deploy_pages:actions\\/deploy-pages:v5.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/deploy_pages:actions\\/deploy_pages:v5.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/deploy:actions\\/deploy-pages:v5.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/deploy:actions\\/deploy_pages:v5.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/deploy-pages@v5.0.0"}]}, {"name": "actions/labeler", "SPDXID": "SPDXRef-Package-github-action-actions-labeler-876ca18109bab6a9", "versionInfo": "v7.0.0", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /oauth2-proxy-7.15.5/.github/workflows/labeler.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/labeler:actions\\/labeler:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/labeler@v7.0.0"}]}, {"name": "actions/setup-go", "SPDXID": "SPDXRef-Package-github-action-actions-setup-go-90be7a13f39b2ce8", "versionInfo": "v7.0.0", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /oauth2-proxy-7.15.5/.github/workflows/ci.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/setup-go@v7.0.0"}]}, {"name": "actions/setup-go", "SPDXID": "SPDXRef-Package-github-action-actions-setup-go-36131aaf8fc5a72e", "versionInfo": "v7.0.0", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /oauth2-proxy-7.15.5/.github/workflows/publish-release.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/setup-go@v7.0.0"}]}, {"name": "actions/setup-node", "SPDXID": "SPDXRef-Package-github-action-actions-setup-node-a40b1a64d1ccb26b", "versionInfo": "v7.0.0", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /oauth2-proxy-7.15.5/.github/workflows/create-release.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/setup-node@v7.0.0"}]}, {"name": "actions/setup-node", "SPDXID": "SPDXRef-Package-github-action-actions-setup-node-edc6f6e334641214", "versionInfo": "v7.0.0", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /oauth2-proxy-7.15.5/.github/workflows/docs.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/setup-node@v7.0.0"}]}, {"name": "actions/stale", "SPDXID": "SPDXRef-Package-github-action-actions-stale-d16a0edde18a5348", "versionInfo": "v11.0.0", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /oauth2-proxy-7.15.5/.github/workflows/stale.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/stale:actions\\/stale:v11.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/stale@v11.0.0"}]}, {"name": "actions/upload-artifact", "SPDXID": "SPDXRef-Package-github-action-actions-upload-artifact-d7c3d65f5c1762d5", "versionInfo": "v7.0.1", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /oauth2-proxy-7.15.5/.github/workflows/publish-release.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/upload-artifact@v7.0.1"}]}, {"name": "actions/upload-pages-artifact", "SPDXID": "SPDXRef-Package-github-action-actions-upload-pages-artifact-5d2a90a8cdaf5eef", "versionInfo": "v5.0.0", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /oauth2-proxy-7.15.5/.github/workflows/docs.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload-pages-artifact:actions\\/upload-pages-artifact:v5.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload-pages-artifact:actions\\/upload_pages_artifact:v5.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload_pages_artifact:actions\\/upload-pages-artifact:v5.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload_pages_artifact:actions\\/upload_pages_artifact:v5.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload-pages:actions\\/upload-pages-artifact:v5.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload-pages:actions\\/upload_pages_artifact:v5.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload_pages:actions\\/upload-pages-artifact:v5.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload_pages:actions\\/upload_pages_artifact:v5.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload:actions\\/upload-pages-artifact:v5.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload:actions\\/upload_pages_artifact:v5.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/upload-pages-artifact@v5.0.0"}]}, {"name": "aquasecurity/trivy-action", "SPDXID": "SPDXRef-Package-github-action-aquasecurity-trivy-action-8acea4fb182b1f65", "versionInfo": "v0.36.0", "supplier": "Organization: aquasecurity", "originator": "Organization: aquasecurity", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /oauth2-proxy-7.15.5/.github/workflows/ci.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity\\/trivy-action:aquasecurity\\/trivy-action:v0.36.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity\\/trivy-action:aquasecurity\\/trivy_action:v0.36.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity\\/trivy_action:aquasecurity\\/trivy-action:v0.36.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity\\/trivy_action:aquasecurity\\/trivy_action:v0.36.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity\\/trivy:aquasecurity\\/trivy-action:v0.36.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity\\/trivy:aquasecurity\\/trivy_action:v0.36.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/aquasecurity/trivy-action@v0.36.0"}]}, {"name": "cloud.google.com/go/auth", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-auth-ee3f30d67a52a6c7", "versionInfo": "v0.23.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:auth:v0.23.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/auth@v0.23.3"}]}, {"name": "cloud.google.com/go/auth", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-auth-a77d899ac322040a", "versionInfo": "v0.23.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:auth:v0.23.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/auth@v0.23.3"}]}, {"name": "cloud.google.com/go/auth/oauth2adapt", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-db9b423947e22092", "versionInfo": "v0.2.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:auth\\/oauth2adapt:v0.2.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/auth@v0.2.8#oauth2adapt"}]}, {"name": "cloud.google.com/go/auth/oauth2adapt", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-846218cc16a209df", "versionInfo": "v0.2.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:auth\\/oauth2adapt:v0.2.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/auth@v0.2.8#oauth2adapt"}]}, {"name": "cloud.google.com/go/compute/metadata", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-c1575fca953a051b", "versionInfo": "v0.10.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:compute\\/metadata:v0.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/compute@v0.10.0#metadata"}]}, {"name": "cloud.google.com/go/compute/metadata", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-85fe5d3cf0b45397", "versionInfo": "v0.10.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:compute\\/metadata:v0.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/compute@v0.10.0#metadata"}]}, {"name": "cncf/prow-github-actions", "SPDXID": "SPDXRef-Package-github-action-cncf-prow-github-actions-2d97487249a77939", "versionInfo": "v3.0.1", "supplier": "Organization: cncf", "originator": "Organization: cncf", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /oauth2-proxy-7.15.5/.github/workflows/prow.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cncf\\/prow-github-actions:cncf\\/prow-github-actions:v3.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cncf\\/prow-github-actions:cncf\\/prow_github_actions:v3.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cncf\\/prow_github_actions:cncf\\/prow-github-actions:v3.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cncf\\/prow_github_actions:cncf\\/prow_github_actions:v3.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cncf\\/prow-github:cncf\\/prow-github-actions:v3.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cncf\\/prow-github:cncf\\/prow_github_actions:v3.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cncf\\/prow_github:cncf\\/prow-github-actions:v3.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cncf\\/prow_github:cncf\\/prow_github_actions:v3.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cncf\\/prow:cncf\\/prow-github-actions:v3.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cncf\\/prow:cncf\\/prow_github_actions:v3.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/cncf/prow-github-actions@v3.0.1"}]}, {"name": "codespell", "SPDXID": "SPDXRef-Package-python-codespell-ee00abe66a169021", "versionInfo": "2.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from installed python package manifest file: /vendor/go.opentelemetry.io/otel/requirements.txt", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python-codespell:python-codespell:2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python-codespell:python_codespell:2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python_codespell:python-codespell:2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python_codespell:python_codespell:2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:codespell:python-codespell:2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:codespell:python_codespell:2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python-codespell:codespell:2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python_codespell:codespell:2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python:python-codespell:2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python:python_codespell:2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:codespell:codespell:2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python:codespell:2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:pypi/codespell@2.4.3"}]}, {"name": "docker/login-action", "SPDXID": "SPDXRef-Package-github-action-docker-login-action-234893657f3f708f", "versionInfo": "v4.6.0", "supplier": "Organization: docker", "originator": "Organization: docker", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /oauth2-proxy-7.15.5/.github/workflows/nightly.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/login-action:docker\\/login-action:v4.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/login-action:docker\\/login_action:v4.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/login_action:docker\\/login-action:v4.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/login_action:docker\\/login_action:v4.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/login:docker\\/login-action:v4.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/login:docker\\/login_action:v4.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/docker/login-action@v4.6.0"}]}, {"name": "docker/login-action", "SPDXID": "SPDXRef-Package-github-action-docker-login-action-385e3367f6f52daf", "versionInfo": "v4.6.0", "supplier": "Organization: docker", "originator": "Organization: docker", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /oauth2-proxy-7.15.5/.github/workflows/publish-release.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/login-action:docker\\/login-action:v4.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/login-action:docker\\/login_action:v4.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/login_action:docker\\/login-action:v4.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/login_action:docker\\/login_action:v4.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/login:docker\\/login-action:v4.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/login:docker\\/login_action:v4.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/docker/login-action@v4.6.0"}]}, {"name": "docker/setup-buildx-action", "SPDXID": "SPDXRef-Package-github-action-docker-setup-buildx-action-35c7862c64e0c4f7", "versionInfo": "v4.2.0", "supplier": "Organization: docker", "originator": "Organization: docker", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /oauth2-proxy-7.15.5/.github/workflows/ci.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup-buildx-action:docker\\/setup-buildx-action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup-buildx-action:docker\\/setup_buildx_action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup_buildx_action:docker\\/setup-buildx-action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup_buildx_action:docker\\/setup_buildx_action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup-buildx:docker\\/setup-buildx-action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup-buildx:docker\\/setup_buildx_action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup_buildx:docker\\/setup-buildx-action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup_buildx:docker\\/setup_buildx_action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup:docker\\/setup-buildx-action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup:docker\\/setup_buildx_action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/docker/setup-buildx-action@v4.2.0"}]}, {"name": "docker/setup-buildx-action", "SPDXID": "SPDXRef-Package-github-action-docker-setup-buildx-action-2977a47c6b169473", "versionInfo": "v4.2.0", "supplier": "Organization: docker", "originator": "Organization: docker", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /oauth2-proxy-7.15.5/.github/workflows/nightly.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup-buildx-action:docker\\/setup-buildx-action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup-buildx-action:docker\\/setup_buildx_action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup_buildx_action:docker\\/setup-buildx-action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup_buildx_action:docker\\/setup_buildx_action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup-buildx:docker\\/setup-buildx-action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup-buildx:docker\\/setup_buildx_action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup_buildx:docker\\/setup-buildx-action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup_buildx:docker\\/setup_buildx_action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup:docker\\/setup-buildx-action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup:docker\\/setup_buildx_action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/docker/setup-buildx-action@v4.2.0"}]}, {"name": "docker/setup-buildx-action", "SPDXID": "SPDXRef-Package-github-action-docker-setup-buildx-action-36d556d9b75cb2f1", "versionInfo": "v4.2.0", "supplier": "Organization: docker", "originator": "Organization: docker", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /oauth2-proxy-7.15.5/.github/workflows/publish-release.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup-buildx-action:docker\\/setup-buildx-action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup-buildx-action:docker\\/setup_buildx_action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup_buildx_action:docker\\/setup-buildx-action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup_buildx_action:docker\\/setup_buildx_action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup-buildx:docker\\/setup-buildx-action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup-buildx:docker\\/setup_buildx_action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup_buildx:docker\\/setup-buildx-action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup_buildx:docker\\/setup_buildx_action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup:docker\\/setup-buildx-action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup:docker\\/setup_buildx_action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/docker/setup-buildx-action@v4.2.0"}]}, {"name": "docker/setup-qemu-action", "SPDXID": "SPDXRef-Package-github-action-docker-setup-qemu-action-2efc6d62dfcb905f", "versionInfo": "v4.2.0", "supplier": "Organization: docker", "originator": "Organization: docker", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /oauth2-proxy-7.15.5/.github/workflows/ci.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup-qemu-action:docker\\/setup-qemu-action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup-qemu-action:docker\\/setup_qemu_action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup_qemu_action:docker\\/setup-qemu-action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup_qemu_action:docker\\/setup_qemu_action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup-qemu:docker\\/setup-qemu-action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup-qemu:docker\\/setup_qemu_action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup_qemu:docker\\/setup-qemu-action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup_qemu:docker\\/setup_qemu_action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup:docker\\/setup-qemu-action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup:docker\\/setup_qemu_action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/docker/setup-qemu-action@v4.2.0"}]}, {"name": "docker/setup-qemu-action", "SPDXID": "SPDXRef-Package-github-action-docker-setup-qemu-action-e0e9caa57d2e8612", "versionInfo": "v4.2.0", "supplier": "Organization: docker", "originator": "Organization: docker", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /oauth2-proxy-7.15.5/.github/workflows/nightly.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup-qemu-action:docker\\/setup-qemu-action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup-qemu-action:docker\\/setup_qemu_action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup_qemu_action:docker\\/setup-qemu-action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup_qemu_action:docker\\/setup_qemu_action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup-qemu:docker\\/setup-qemu-action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup-qemu:docker\\/setup_qemu_action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup_qemu:docker\\/setup-qemu-action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup_qemu:docker\\/setup_qemu_action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup:docker\\/setup-qemu-action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup:docker\\/setup_qemu_action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/docker/setup-qemu-action@v4.2.0"}]}, {"name": "docker/setup-qemu-action", "SPDXID": "SPDXRef-Package-github-action-docker-setup-qemu-action-1bc474989a71a1d2", "versionInfo": "v4.2.0", "supplier": "Organization: docker", "originator": "Organization: docker", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /oauth2-proxy-7.15.5/.github/workflows/publish-release.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup-qemu-action:docker\\/setup-qemu-action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup-qemu-action:docker\\/setup_qemu_action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup_qemu_action:docker\\/setup-qemu-action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup_qemu_action:docker\\/setup_qemu_action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup-qemu:docker\\/setup-qemu-action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup-qemu:docker\\/setup_qemu_action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup_qemu:docker\\/setup-qemu-action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup_qemu:docker\\/setup_qemu_action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup:docker\\/setup-qemu-action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker\\/setup:docker\\/setup_qemu_action:v4.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/docker/setup-qemu-action@v4.2.0"}]}, {"name": "github.com/Bose/minisentinel", "SPDXID": "SPDXRef-Package-go-module-github.com-Bose-minisentinel-ce4e34f9211926da", "versionInfo": "v0.0.0-20200130220412-917c5a9223bb", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Bose:minisentinel:v0.0.0-20200130220412-917c5a9223bb:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Bose/minisentinel@v0.0.0-20200130220412-917c5a9223bb"}]}, {"name": "github.com/Bose/minisentinel", "SPDXID": "SPDXRef-Package-go-module-github.com-Bose-minisentinel-c889598878e9a3c2", "versionInfo": "v0.0.0-20200130220412-917c5a9223bb", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Bose:minisentinel:v0.0.0-20200130220412-917c5a9223bb:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Bose/minisentinel@v0.0.0-20200130220412-917c5a9223bb"}]}, {"name": "github.com/Masterminds/semver/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-bb0aa2b6ed288b02", "versionInfo": "v3.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Masterminds:semver\\/v3:v3.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Masterminds/semver@v3.5.0#v3"}]}, {"name": "github.com/Masterminds/semver/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-4a6f2b06f0d05a0b", "versionInfo": "v3.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Masterminds:semver\\/v3:v3.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Masterminds/semver@v3.5.0#v3"}]}, {"name": "github.com/a8m/envsubst", "SPDXID": "SPDXRef-Package-go-module-github.com-a8m-envsubst-53b4b9cf69cad2d0", "versionInfo": "v1.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:a8m:envsubst:v1.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/a8m/envsubst@v1.4.3"}]}, {"name": "github.com/a8m/envsubst", "SPDXID": "SPDXRef-Package-go-module-github.com-a8m-envsubst-539e83ff052d6016", "versionInfo": "v1.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:a8m:envsubst:v1.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/a8m/envsubst@v1.4.3"}]}, {"name": "github.com/alicebob/miniredis/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-alicebob-miniredis-v2-0b57e7b5be7ad969", "versionInfo": "v2.39.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:alicebob:miniredis\\/v2:v2.39.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/alicebob/miniredis@v2.39.0#v2"}]}, {"name": "github.com/alicebob/miniredis/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-alicebob-miniredis-v2-717b92d4866a5ff0", "versionInfo": "v2.39.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:alicebob:miniredis\\/v2:v2.39.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/alicebob/miniredis@v2.39.0#v2"}]}, {"name": "github.com/beorn7/perks", "SPDXID": "SPDXRef-Package-go-module-github.com-beorn7-perks-4b7f4d17e7911c1a", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:beorn7:perks:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/beorn7/perks@v1.0.1"}]}, {"name": "github.com/beorn7/perks", "SPDXID": "SPDXRef-Package-go-module-github.com-beorn7-perks-665af737e55ce3c2", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:beorn7:perks:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/beorn7/perks@v1.0.1"}]}, {"name": "github.com/bitly/go-simplejson", "SPDXID": "SPDXRef-Package-go-module-github.com-bitly-go-simplejson-79f42cff34b4736e", "versionInfo": "v0.5.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bitly:go-simplejson:v0.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bitly:go_simplejson:v0.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bitly/go-simplejson@v0.5.1"}]}, {"name": "github.com/bitly/go-simplejson", "SPDXID": "SPDXRef-Package-go-module-github.com-bitly-go-simplejson-719e0d3c39745a1f", "versionInfo": "v0.5.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bitly:go-simplejson:v0.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bitly:go_simplejson:v0.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bitly/go-simplejson@v0.5.1"}]}, {"name": "github.com/bsm/redislock", "SPDXID": "SPDXRef-Package-go-module-github.com-bsm-redislock-0595d34521830333", "versionInfo": "v0.10.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bsm:redislock:v0.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bsm/redislock@v0.10.0"}]}, {"name": "github.com/bsm/redislock", "SPDXID": "SPDXRef-Package-go-module-github.com-bsm-redislock-7b4c9102dd752ff5", "versionInfo": "v0.10.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bsm:redislock:v0.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bsm/redislock@v0.10.0"}]}, {"name": "github.com/cespare/xxhash/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-44163de5007e6449", "versionInfo": "v2.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cespare/xxhash@v2.3.0#v2"}]}, {"name": "github.com/cespare/xxhash/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-772ff23bb73b8a11", "versionInfo": "v2.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cespare/xxhash@v2.3.0#v2"}]}, {"name": "github.com/coreos/go-oidc/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-coreos-go-oidc-v3-e5919b0d2d6e62f0", "versionInfo": "v3.21.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go-oidc\\/v3:v3.21.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go_oidc\\/v3:v3.21.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/coreos/go-oidc@v3.21.0#v3"}]}, {"name": "github.com/coreos/go-oidc/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-coreos-go-oidc-v3-4e56df7d27d0028e", "versionInfo": "v3.21.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go-oidc\\/v3:v3.21.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go_oidc\\/v3:v3.21.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/coreos/go-oidc@v3.21.0#v3"}]}, {"name": "github.com/coreos/go-systemd", "SPDXID": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-dfab21274f47451f", "versionInfo": "v0.0.0-20191104093116-d3cd4ed1dbcf", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go-systemd:v0.0.0-20191104093116-d3cd4ed1dbcf:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go_systemd:v0.0.0-20191104093116-d3cd4ed1dbcf:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/coreos/go-systemd@v0.0.0-20191104093116-d3cd4ed1dbcf"}]}, {"name": "github.com/coreos/go-systemd", "SPDXID": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-f3ad52478ad4e78a", "versionInfo": "v0.0.0-20191104093116-d3cd4ed1dbcf", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go-systemd:v0.0.0-20191104093116-d3cd4ed1dbcf:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go_systemd:v0.0.0-20191104093116-d3cd4ed1dbcf:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/coreos/go-systemd@v0.0.0-20191104093116-d3cd4ed1dbcf"}]}, {"name": "github.com/felixge/httpsnoop", "SPDXID": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-21924c216340421a", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:felixge:httpsnoop:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/felixge/httpsnoop@v1.1.0"}]}, {"name": "github.com/felixge/httpsnoop", "SPDXID": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-07f46c4978384982", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:felixge:httpsnoop:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/felixge/httpsnoop@v1.1.0"}]}, {"name": "github.com/fsnotify/fsnotify", "SPDXID": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-73529cb77374f1e3", "versionInfo": "v1.10.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fsnotify:fsnotify:v1.10.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fsnotify/fsnotify@v1.10.1"}]}, {"name": "github.com/fsnotify/fsnotify", "SPDXID": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-7c26c270e5bef730", "versionInfo": "v1.10.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fsnotify:fsnotify:v1.10.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fsnotify/fsnotify@v1.10.1"}]}, {"name": "github.com/go-jose/go-jose/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v3-4b4ab9782c56aa12", "versionInfo": "v3.0.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go-jose\\/v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go_jose\\/v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go-jose\\/v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go_jose\\/v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-jose\\/v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_jose\\/v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-jose/go-jose@v3.0.5#v3"}]}, {"name": "github.com/go-jose/go-jose/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v3-ba382b9b335aa2af", "versionInfo": "v3.0.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go-jose\\/v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go_jose\\/v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go-jose\\/v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go_jose\\/v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-jose\\/v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_jose\\/v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-jose/go-jose@v3.0.5#v3"}]}, {"name": "github.com/go-jose/go-jose/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-05eb82ff5b803225", "versionInfo": "v4.1.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go-jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go_jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go-jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go_jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-jose/go-jose@v4.1.5#v4"}]}, {"name": "github.com/go-jose/go-jose/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-cee47eb18c6748a2", "versionInfo": "v4.1.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go-jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go_jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go-jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go_jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-jose/go-jose@v4.1.5#v4"}]}, {"name": "github.com/go-logr/logr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-logr-5d64ad5913a6841c", "versionInfo": "v1.4.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:logr:v1.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:logr:v1.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:logr:v1.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/logr@v1.4.4"}]}, {"name": "github.com/go-logr/logr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-logr-ff688f44df0be420", "versionInfo": "v1.4.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:logr:v1.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:logr:v1.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:logr:v1.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/logr@v1.4.4"}]}, {"name": "github.com/go-logr/stdr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-stdr-ed7921825a53d3f4", "versionInfo": "v1.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/stdr@v1.2.2"}]}, {"name": "github.com/go-logr/stdr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-stdr-79907ade3a90e953", "versionInfo": "v1.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/stdr@v1.2.2"}]}, {"name": "github.com/go-task/slim-sprig/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-go-task-slim-sprig-v3-5722741857d8df35", "versionInfo": "v3.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-task:slim-sprig\\/v3:v3.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-task:slim_sprig\\/v3:v3.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_task:slim-sprig\\/v3:v3.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_task:slim_sprig\\/v3:v3.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:slim-sprig\\/v3:v3.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:slim_sprig\\/v3:v3.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-task/slim-sprig@v3.0.0#v3"}]}, {"name": "github.com/go-task/slim-sprig/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-go-task-slim-sprig-v3-9af3426fa0421261", "versionInfo": "v3.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-task:slim-sprig\\/v3:v3.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-task:slim_sprig\\/v3:v3.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_task:slim-sprig\\/v3:v3.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_task:slim_sprig\\/v3:v3.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:slim-sprig\\/v3:v3.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:slim_sprig\\/v3:v3.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-task/slim-sprig@v3.0.0#v3"}]}, {"name": "github.com/go-viper/mapstructure/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-69e67edfc2286e18", "versionInfo": "v2.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-viper/mapstructure@v2.5.0#v2"}]}, {"name": "github.com/go-viper/mapstructure/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-b8afb83cd9b4e104", "versionInfo": "v2.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-viper/mapstructure@v2.5.0#v2"}]}, {"name": "github.com/golang-jwt/jwt/v5", "SPDXID": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-a9123a7cdb8224b1", "versionInfo": "v5.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang-jwt:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang_jwt:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/golang-jwt/jwt@v5.3.1#v5"}]}, {"name": "github.com/golang-jwt/jwt/v5", "SPDXID": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-5b63f3b6f34be6b1", "versionInfo": "v5.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang-jwt:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang_jwt:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/golang-jwt/jwt@v5.3.1#v5"}]}, {"name": "github.com/google/go-cmp", "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-cmp-473d0adb4b419c7e", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go-cmp:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go_cmp:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/go-cmp@v0.7.0"}]}, {"name": "github.com/google/go-cmp", "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-cmp-b0a3722cb35a54a5", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go-cmp:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go_cmp:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/go-cmp@v0.7.0"}]}, {"name": "github.com/google/pprof", "SPDXID": "SPDXRef-Package-go-module-github.com-google-pprof-0f80dceb464406c3", "versionInfo": "v0.0.0-20260802141513-ef3492d7dac3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:pprof:v0.0.0-20260802141513-ef3492d7dac3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/pprof@v0.0.0-20260802141513-ef3492d7dac3"}]}, {"name": "github.com/google/pprof", "SPDXID": "SPDXRef-Package-go-module-github.com-google-pprof-d2223d9d64e8300f", "versionInfo": "v0.0.0-20260802141513-ef3492d7dac3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:pprof:v0.0.0-20260802141513-ef3492d7dac3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/pprof@v0.0.0-20260802141513-ef3492d7dac3"}]}, {"name": "github.com/google/s2a-go", "SPDXID": "SPDXRef-Package-go-module-github.com-google-s2a-go-a30ef8f4ba34534f", "versionInfo": "v0.1.10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:s2a-go:v0.1.10:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:s2a_go:v0.1.10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/s2a-go@v0.1.10"}]}, {"name": "github.com/google/s2a-go", "SPDXID": "SPDXRef-Package-go-module-github.com-google-s2a-go-22bdda956c4ad01a", "versionInfo": "v0.1.10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:s2a-go:v0.1.10:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:s2a_go:v0.1.10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/s2a-go@v0.1.10"}]}, {"name": "github.com/google/uuid", "SPDXID": "SPDXRef-Package-go-module-github.com-google-uuid-f6424607fde0264b", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/uuid@v1.6.0"}]}, {"name": "github.com/google/uuid", "SPDXID": "SPDXRef-Package-go-module-github.com-google-uuid-a138f9b418ca24ef", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/uuid@v1.6.0"}]}, {"name": "github.com/googleapis/enterprise-certificate-proxy", "SPDXID": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-ad57399cb3c994ee", "versionInfo": "v0.3.22", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:enterprise-certificate-proxy:v0.3.22:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:enterprise_certificate_proxy:v0.3.22:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.22"}]}, {"name": "github.com/googleapis/enterprise-certificate-proxy", "SPDXID": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-8006676545aab105", "versionInfo": "v0.3.22", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:enterprise-certificate-proxy:v0.3.22:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:enterprise_certificate_proxy:v0.3.22:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.22"}]}, {"name": "github.com/googleapis/gax-go/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-7c81faf1d434beda", "versionInfo": "v2.24.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:gax-go\\/v2:v2.24.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:gax_go\\/v2:v2.24.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/googleapis/gax-go@v2.24.1#v2"}]}, {"name": "github.com/googleapis/gax-go/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-dfffd5de5a221936", "versionInfo": "v2.24.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:gax-go\\/v2:v2.24.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:gax_go\\/v2:v2.24.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/googleapis/gax-go@v2.24.1#v2"}]}, {"name": "github.com/gorilla/mux", "SPDXID": "SPDXRef-Package-go-module-github.com-gorilla-mux-3aaebf4b073c46e0", "versionInfo": "v1.8.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gorilla:mux:v1.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gorilla/mux@v1.8.1"}]}, {"name": "github.com/gorilla/mux", "SPDXID": "SPDXRef-Package-go-module-github.com-gorilla-mux-1c336ba736cfbc03", "versionInfo": "v1.8.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gorilla:mux:v1.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gorilla/mux@v1.8.1"}]}, {"name": "github.com/justinas/alice", "SPDXID": "SPDXRef-Package-go-module-github.com-justinas-alice-e27b9d2d326a3321", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:justinas:alice:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/justinas/alice@v1.2.0"}]}, {"name": "github.com/justinas/alice", "SPDXID": "SPDXRef-Package-go-module-github.com-justinas-alice-8d61132370c99886", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:justinas:alice:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/justinas/alice@v1.2.0"}]}, {"name": "github.com/kylelemons/godebug", "SPDXID": "SPDXRef-Package-go-module-github.com-kylelemons-godebug-054bf546a3d78ff8", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:kylelemons:godebug:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/kylelemons/godebug@v1.1.0"}]}, {"name": "github.com/kylelemons/godebug", "SPDXID": "SPDXRef-Package-go-module-github.com-kylelemons-godebug-7172fe198b74604b", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:kylelemons:godebug:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/kylelemons/godebug@v1.1.0"}]}, {"name": "github.com/munnerz/goautoneg", "SPDXID": "SPDXRef-Package-go-module-github.com-munnerz-goautoneg-2d33de0c2e03c980", "versionInfo": "v0.0.0-20191010083416-a7dc8b61c822", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:munnerz:goautoneg:v0.0.0-20191010083416-a7dc8b61c822:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822"}]}, {"name": "github.com/munnerz/goautoneg", "SPDXID": "SPDXRef-Package-go-module-github.com-munnerz-goautoneg-4eecb2fd1e5060d0", "versionInfo": "v0.0.0-20191010083416-a7dc8b61c822", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:munnerz:goautoneg:v0.0.0-20191010083416-a7dc8b61c822:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822"}]}, {"name": "github.com/oauth2-proxy/mockoidc", "SPDXID": "SPDXRef-Package-go-module-github.com-oauth2-proxy-mockoidc-26c1d5025cfeb741", "versionInfo": "v0.0.0-20240214162133-caebfff84d25", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2-proxy:mockoidc:v0.0.0-20240214162133-caebfff84d25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2_proxy:mockoidc:v0.0.0-20240214162133-caebfff84d25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2:mockoidc:v0.0.0-20240214162133-caebfff84d25:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/oauth2-proxy/mockoidc@v0.0.0-20240214162133-caebfff84d25"}]}, {"name": "github.com/oauth2-proxy/mockoidc", "SPDXID": "SPDXRef-Package-go-module-github.com-oauth2-proxy-mockoidc-113c526798afb772", "versionInfo": "v0.0.0-20240214162133-caebfff84d25", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2-proxy:mockoidc:v0.0.0-20240214162133-caebfff84d25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2_proxy:mockoidc:v0.0.0-20240214162133-caebfff84d25:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2:mockoidc:v0.0.0-20240214162133-caebfff84d25:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/oauth2-proxy/mockoidc@v0.0.0-20240214162133-caebfff84d25"}]}, {"name": "github.com/onsi/ginkgo/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-onsi-ginkgo-v2-3c8ceb74af469bef", "versionInfo": "v2.33.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:onsi:ginkgo\\/v2:v2.33.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/onsi/ginkgo@v2.33.0#v2"}]}, {"name": "github.com/onsi/ginkgo/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-onsi-ginkgo-v2-70f5ac54131250b3", "versionInfo": "v2.33.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:onsi:ginkgo\\/v2:v2.33.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/onsi/ginkgo@v2.33.0#v2"}]}, {"name": "github.com/onsi/gomega", "SPDXID": "SPDXRef-Package-go-module-github.com-onsi-gomega-f7610f61d316b75e", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:onsi:gomega:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/onsi/gomega@v1.44.0"}]}, {"name": "github.com/onsi/gomega", "SPDXID": "SPDXRef-Package-go-module-github.com-onsi-gomega-e4a068934626e35f", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:onsi:gomega:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/onsi/gomega@v1.44.0"}]}, {"name": "github.com/pelletier/go-toml/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-d91b6d6201c35c75", "versionInfo": "v2.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pelletier:go-toml\\/v2:v2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pelletier:go_toml\\/v2:v2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pelletier/go-toml@v2.4.3#v2"}]}, {"name": "github.com/pelletier/go-toml/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-8648c397b90bda9d", "versionInfo": "v2.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pelletier:go-toml\\/v2:v2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pelletier:go_toml\\/v2:v2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pelletier/go-toml@v2.4.3#v2"}]}, {"name": "github.com/pierrec/lz4/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-75058587b03d7e92", "versionInfo": "UNKNOWN", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /vendor/github.com/pierrec/lz4/v4/lz4.test", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pierrec:lz4\\/v4:*:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pierrec/lz4#v4"}]}, {"name": "github.com/pierrec/lz4/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-e9572a682bc41143", "versionInfo": "v4.1.31", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pierrec:lz4\\/v4:v4.1.31:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pierrec/lz4@v4.1.31#v4"}]}, {"name": "github.com/pierrec/lz4/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-597f7402c3293169", "versionInfo": "v4.1.31", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pierrec:lz4\\/v4:v4.1.31:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pierrec/lz4@v4.1.31#v4"}]}, {"name": "github.com/prometheus/client_golang", "SPDXID": "SPDXRef-Package-go-module-github.com-prometheus-client-golang-a514cc48df50cef4", "versionInfo": "v1.24.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:client-golang:v1.24.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:client_golang:v1.24.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/prometheus/client_golang@v1.24.1"}]}, {"name": "github.com/prometheus/client_golang", "SPDXID": "SPDXRef-Package-go-module-github.com-prometheus-client-golang-d49d501d6b2810b0", "versionInfo": "v1.24.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:client-golang:v1.24.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:client_golang:v1.24.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/prometheus/client_golang@v1.24.1"}]}, {"name": "github.com/prometheus/client_model", "SPDXID": "SPDXRef-Package-go-module-github.com-prometheus-client-model-a37501789b93a9d0", "versionInfo": "v0.6.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:client-model:v0.6.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:client_model:v0.6.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/prometheus/client_model@v0.6.2"}]}, {"name": "github.com/prometheus/client_model", "SPDXID": "SPDXRef-Package-go-module-github.com-prometheus-client-model-d2e473ad5b972368", "versionInfo": "v0.6.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:client-model:v0.6.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:client_model:v0.6.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/prometheus/client_model@v0.6.2"}]}, {"name": "github.com/prometheus/common", "SPDXID": "SPDXRef-Package-go-module-github.com-prometheus-common-0f58d85c7e917ff8", "versionInfo": "v0.70.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:common:v0.70.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/prometheus/common@v0.70.1"}]}, {"name": "github.com/prometheus/common", "SPDXID": "SPDXRef-Package-go-module-github.com-prometheus-common-c8c93793ecc5c81b", "versionInfo": "v0.70.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:common:v0.70.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/prometheus/common@v0.70.1"}]}, {"name": "github.com/prometheus/procfs", "SPDXID": "SPDXRef-Package-go-module-github.com-prometheus-procfs-878089afee5fa76e", "versionInfo": "v0.21.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:procfs:v0.21.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/prometheus/procfs@v0.21.1"}]}, {"name": "github.com/prometheus/procfs", "SPDXID": "SPDXRef-Package-go-module-github.com-prometheus-procfs-0ef72c0ebd3b9e95", "versionInfo": "v0.21.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:procfs:v0.21.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/prometheus/procfs@v0.21.1"}]}, {"name": "github.com/redis/go-redis/v9", "SPDXID": "SPDXRef-Package-go-module-github.com-redis-go-redis-v9-366c5cf8a847aa61", "versionInfo": "v9.22.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:redis:go-redis\\/v9:v9.22.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:redis:go_redis\\/v9:v9.22.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/redis/go-redis@v9.22.0#v9"}]}, {"name": "github.com/redis/go-redis/v9", "SPDXID": "SPDXRef-Package-go-module-github.com-redis-go-redis-v9-fc65783ae32d3bc6", "versionInfo": "v9.22.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:redis:go-redis\\/v9:v9.22.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:redis:go_redis\\/v9:v9.22.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/redis/go-redis@v9.22.0#v9"}]}, {"name": "github.com/sagikazarmark/locafero", "SPDXID": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-704e64a96653ce86", "versionInfo": "v0.12.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sagikazarmark:locafero:v0.12.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sagikazarmark/locafero@v0.12.0"}]}, {"name": "github.com/sagikazarmark/locafero", "SPDXID": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-b46bfc1b76c1577d", "versionInfo": "v0.12.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sagikazarmark:locafero:v0.12.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sagikazarmark/locafero@v0.12.0"}]}, {"name": "github.com/spf13/afero", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-afero-577ab40ea4ceaedf", "versionInfo": "v1.15.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:afero:v1.15.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/afero@v1.15.0"}]}, {"name": "github.com/spf13/afero", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-afero-c8e91c46367c88c0", "versionInfo": "v1.15.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:afero:v1.15.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/afero@v1.15.0"}]}, {"name": "github.com/spf13/cast", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-cast-b759ce340b0f2e0e", "versionInfo": "v1.10.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:cast:v1.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/cast@v1.10.0"}]}, {"name": "github.com/spf13/cast", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-cast-52510dd115dd69fa", "versionInfo": "v1.10.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:cast:v1.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/cast@v1.10.0"}]}, {"name": "github.com/spf13/pflag", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-pflag-ec9ed93888749dc0", "versionInfo": "v1.0.10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:pflag:v1.0.10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/pflag@v1.0.10"}]}, {"name": "github.com/spf13/pflag", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-pflag-7113956b3044706b", "versionInfo": "v1.0.10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:pflag:v1.0.10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/pflag@v1.0.10"}]}, {"name": "github.com/spf13/viper", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-viper-53bb8bba12e970aa", "versionInfo": "v1.21.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:viper:v1.21.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/viper@v1.21.0"}]}, {"name": "github.com/spf13/viper", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-viper-83fd8b1ff0160f5a", "versionInfo": "v1.21.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:viper:v1.21.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/viper@v1.21.0"}]}, {"name": "github.com/stretchr/testify", "SPDXID": "SPDXRef-Package-go-module-github.com-stretchr-testify-d64a25dace8d069c", "versionInfo": "v1.12.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:stretchr:testify:v1.12.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/stretchr/testify@v1.12.1"}]}, {"name": "github.com/stretchr/testify", "SPDXID": "SPDXRef-Package-go-module-github.com-stretchr-testify-bf09dd4de3f75dc9", "versionInfo": "v1.12.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:stretchr:testify:v1.12.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/stretchr/testify@v1.12.1"}]}, {"name": "github.com/subosito/gotenv", "SPDXID": "SPDXRef-Package-go-module-github.com-subosito-gotenv-2db166198c302bc1", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:subosito:gotenv:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/subosito/gotenv@v1.6.0"}]}, {"name": "github.com/subosito/gotenv", "SPDXID": "SPDXRef-Package-go-module-github.com-subosito-gotenv-a69fce9bf91b5e01", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:subosito:gotenv:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/subosito/gotenv@v1.6.0"}]}, {"name": "github.com/vmihailenco/msgpack/v5", "SPDXID": "SPDXRef-Package-go-module-github.com-vmihailenco-msgpack-v5-997b5609b93d68dc", "versionInfo": "v5.4.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vmihailenco:msgpack\\/v5:v5.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vmihailenco/msgpack@v5.4.1#v5"}]}, {"name": "github.com/vmihailenco/msgpack/v5", "SPDXID": "SPDXRef-Package-go-module-github.com-vmihailenco-msgpack-v5-e0430ddb8d8f4945", "versionInfo": "v5.4.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vmihailenco:msgpack\\/v5:v5.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vmihailenco/msgpack@v5.4.1#v5"}]}, {"name": "github.com/vmihailenco/tagparser/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-vmihailenco-tagparser-v2-ba1e7884e0038c7b", "versionInfo": "v2.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vmihailenco:tagparser\\/v2:v2.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vmihailenco/tagparser@v2.0.0#v2"}]}, {"name": "github.com/vmihailenco/tagparser/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-vmihailenco-tagparser-v2-222d59278bef4f28", "versionInfo": "v2.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vmihailenco:tagparser\\/v2:v2.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vmihailenco/tagparser@v2.0.0#v2"}]}, {"name": "github.com/yuin/gopher-lua", "SPDXID": "SPDXRef-Package-go-module-github.com-yuin-gopher-lua-38688f919ed19205", "versionInfo": "v1.1.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yuin:gopher-lua:v1.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yuin:gopher_lua:v1.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/yuin/gopher-lua@v1.1.2"}]}, {"name": "github.com/yuin/gopher-lua", "SPDXID": "SPDXRef-Package-go-module-github.com-yuin-gopher-lua-1fe780299c4cc589", "versionInfo": "v1.1.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yuin:gopher-lua:v1.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yuin:gopher_lua:v1.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/yuin/gopher-lua@v1.1.2"}]}, {"name": "github/codeql-action/analyze", "SPDXID": "SPDXRef-Package-github-action-github-codeql-action-analyze-31a905edfc330b2a", "versionInfo": "v4.37.7", "supplier": "Organization: github", "originator": "Organization: github", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /oauth2-proxy-7.15.5/.github/workflows/codeql.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql-action\\/analyze:github\\/codeql-action\\/analyze:v4.37.7:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql-action\\/analyze:github\\/codeql_action\\/analyze:v4.37.7:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql_action\\/analyze:github\\/codeql-action\\/analyze:v4.37.7:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql_action\\/analyze:github\\/codeql_action\\/analyze:v4.37.7:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/analyze:v4.37.7:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/analyze:v4.37.7:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/github/codeql-action@v4.37.7#analyze"}]}, {"name": "github/codeql-action/autobuild", "SPDXID": "SPDXRef-Package-github-action-github-codeql-action-autobuild-1a727b06868c6d1b", "versionInfo": "v4.37.7", "supplier": "Organization: github", "originator": "Organization: github", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /oauth2-proxy-7.15.5/.github/workflows/codeql.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql-action\\/autobuild:github\\/codeql-action\\/autobuild:v4.37.7:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql-action\\/autobuild:github\\/codeql_action\\/autobuild:v4.37.7:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql_action\\/autobuild:github\\/codeql-action\\/autobuild:v4.37.7:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql_action\\/autobuild:github\\/codeql_action\\/autobuild:v4.37.7:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/autobuild:v4.37.7:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/autobuild:v4.37.7:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/github/codeql-action@v4.37.7#autobuild"}]}, {"name": "github/codeql-action/init", "SPDXID": "SPDXRef-Package-github-action-github-codeql-action-init-f100c24d2299a1e4", "versionInfo": "v4.37.7", "supplier": "Organization: github", "originator": "Organization: github", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /oauth2-proxy-7.15.5/.github/workflows/codeql.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql-action\\/init:github\\/codeql-action\\/init:v4.37.7:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql-action\\/init:github\\/codeql_action\\/init:v4.37.7:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql_action\\/init:github\\/codeql-action\\/init:v4.37.7:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql_action\\/init:github\\/codeql_action\\/init:v4.37.7:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/init:v4.37.7:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/init:v4.37.7:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/github/codeql-action@v4.37.7#init"}]}, {"name": "github/codeql-action/upload-sarif", "SPDXID": "SPDXRef-Package-github-action-github-codeql-action-upload-sarif-d4bcd902c7019a23", "versionInfo": "v4.37.7", "supplier": "Organization: github", "originator": "Organization: github", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /oauth2-proxy-7.15.5/.github/workflows/ci.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql-action\\/upload-sarif:github\\/codeql-action\\/upload-sarif:v4.37.7:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql-action\\/upload-sarif:github\\/codeql_action\\/upload_sarif:v4.37.7:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql_action\\/upload_sarif:github\\/codeql-action\\/upload-sarif:v4.37.7:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql_action\\/upload_sarif:github\\/codeql_action\\/upload_sarif:v4.37.7:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql-action\\/upload:github\\/codeql-action\\/upload-sarif:v4.37.7:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql-action\\/upload:github\\/codeql_action\\/upload_sarif:v4.37.7:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql_action\\/upload:github\\/codeql-action\\/upload-sarif:v4.37.7:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql_action\\/upload:github\\/codeql_action\\/upload_sarif:v4.37.7:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/upload-sarif:v4.37.7:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/upload_sarif:v4.37.7:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/github/codeql-action@v4.37.7#upload-sarif"}]}, {"name": "go.opentelemetry.io/auto/sdk", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-a00544d9cf935bfa", "versionInfo": "v1.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:auto:sdk:v1.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1"}]}, {"name": "go.opentelemetry.io/auto/sdk", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-b62b3b3e04deec42", "versionInfo": "v1.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:auto:sdk:v1.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1"}]}, {"name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-2e5e2097a23c0dc3", "versionInfo": "v0.70.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/otelhttp:v0.70.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation@v0.70.0#net/http/otelhttp"}]}, {"name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-157b8ddd112253dc", "versionInfo": "v0.70.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/otelhttp:v0.70.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation@v0.70.0#net/http/otelhttp"}]}, {"name": "go.opentelemetry.io/otel", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-f27770650f676674", "versionInfo": "v1.45.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel@v1.45.0"}]}, {"name": "go.opentelemetry.io/otel", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-84fe57d074f771b1", "versionInfo": "v1.45.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel@v1.45.0"}]}, {"name": "go.opentelemetry.io/otel/metric", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-f9a727401b6a9791", "versionInfo": "v1.45.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:metric:v1.45.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/metric@v1.45.0"}]}, {"name": "go.opentelemetry.io/otel/metric", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-32618e8e11e06ce6", "versionInfo": "v1.45.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:metric:v1.45.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/metric@v1.45.0"}]}, {"name": "go.opentelemetry.io/otel/trace", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-8e426af775fa3244", "versionInfo": "v1.45.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:trace:v1.45.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/trace@v1.45.0"}]}, {"name": "go.opentelemetry.io/otel/trace", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-4f6bbb5ea857a60b", "versionInfo": "v1.45.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:trace:v1.45.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/trace@v1.45.0"}]}, {"name": "go.uber.org/atomic", "SPDXID": "SPDXRef-Package-go-module-go.uber.org-atomic-8997eafd4641c55f", "versionInfo": "v1.11.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.uber.org/atomic@v1.11.0"}]}, {"name": "go.uber.org/atomic", "SPDXID": "SPDXRef-Package-go-module-go.uber.org-atomic-b8dac96e58dce7e2", "versionInfo": "v1.11.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.uber.org/atomic@v1.11.0"}]}, {"name": "go.yaml.in/yaml/v3", "SPDXID": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-4fc93c87aeebc64b", "versionInfo": "v3.0.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml:v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.yaml.in/yaml/v3@v3.0.5"}]}, {"name": "go.yaml.in/yaml/v3", "SPDXID": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-6c9f2d9b94332387", "versionInfo": "v3.0.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml:v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.yaml.in/yaml/v3@v3.0.5"}]}, {"name": "golang.org/x/crypto", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-crypto-4a7180a3454dcfdc", "versionInfo": "v0.57.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:ssh:v0.57.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/crypto@v0.57.0"}]}, {"name": "golang.org/x/crypto", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-crypto-73c3bac49799b9a7", "versionInfo": "v0.57.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:ssh:v0.57.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/crypto@v0.57.0"}]}, {"name": "golang.org/x/mod", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-mod-56d232e7120c3a8b", "versionInfo": "v0.41.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/mod:v0.41.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/mod@v0.41.0"}]}, {"name": "golang.org/x/mod", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-mod-1a4f31dfee761654", "versionInfo": "v0.41.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/mod:v0.41.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/mod@v0.41.0"}]}, {"name": "golang.org/x/net", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-net-50bf6051e43e2577", "versionInfo": "v0.59.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:networking:v0.59.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/net@v0.59.0"}]}, {"name": "golang.org/x/net", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-net-5265f5ea4618671c", "versionInfo": "v0.59.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:networking:v0.59.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/net@v0.59.0"}]}, {"name": "golang.org/x/oauth2", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-oauth2-2e730bac8336b8f7", "versionInfo": "v0.37.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/oauth2:v0.37.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/oauth2@v0.37.0"}]}, {"name": "golang.org/x/oauth2", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-oauth2-6940de185fda9158", "versionInfo": "v0.37.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/oauth2:v0.37.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/oauth2@v0.37.0"}]}, {"name": "golang.org/x/sync", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sync-1c59d62db54de586", "versionInfo": "v0.23.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sync:v0.23.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sync@v0.23.0"}]}, {"name": "golang.org/x/sync", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sync-cd66f78e486cb96b", "versionInfo": "v0.23.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sync:v0.23.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sync@v0.23.0"}]}, {"name": "golang.org/x/sys", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sys-22bf94b873e909e4", "versionInfo": "v0.48.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sys:v0.48.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sys@v0.48.0"}]}, {"name": "golang.org/x/sys", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sys-ef149a8ecfde8987", "versionInfo": "v0.48.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sys:v0.48.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sys@v0.48.0"}]}, {"name": "golang.org/x/text", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-text-8946d0e2b7ce5ab6", "versionInfo": "v0.42.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:text:v0.42.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/text@v0.42.0"}]}, {"name": "golang.org/x/text", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-text-1782e870745f5986", "versionInfo": "v0.42.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:text:v0.42.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/text@v0.42.0"}]}, {"name": "golang.org/x/tools", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-tools-1d0c1f0fc356ce03", "versionInfo": "v0.49.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/tools:v0.49.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/tools@v0.49.0"}]}, {"name": "golang.org/x/tools", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-tools-396df050f7c8cf3b", "versionInfo": "v0.49.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/tools:v0.49.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/tools@v0.49.0"}]}, {"name": "google.golang.org/api", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-api-4974decf7a98c76e", "versionInfo": "v0.299.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:api:v0.299.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/api@v0.299.0"}]}, {"name": "google.golang.org/api", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-api-8f3e131e029c644f", "versionInfo": "v0.299.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:api:v0.299.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/api@v0.299.0"}]}, {"name": "google.golang.org/genproto/googleapis/rpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-28fa02a12896cbbd", "versionInfo": "v0.0.0-20260921155816-b14227669459", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260921155816-b14227669459:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260921155816-b14227669459#rpc"}]}, {"name": "google.golang.org/genproto/googleapis/rpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-bee40c10035bd924", "versionInfo": "v0.0.0-20260921155816-b14227669459", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260921155816-b14227669459:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260921155816-b14227669459#rpc"}]}, {"name": "google.golang.org/grpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-grpc-54bcc746f2ab7987", "versionInfo": "v1.84.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:grpc:v1.84.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/grpc@v1.84.0"}]}, {"name": "google.golang.org/grpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-grpc-032d64e7b2c5e72b", "versionInfo": "v1.84.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:grpc:v1.84.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/grpc@v1.84.0"}]}, {"name": "google.golang.org/protobuf", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-protobuf-0055873c0ce1a39b", "versionInfo": "v1.36.12", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:protobuf:v1.36.12:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/protobuf@v1.36.12"}]}, {"name": "google.golang.org/protobuf", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-protobuf-263ce7e375a9df81", "versionInfo": "v1.36.12", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:protobuf:v1.36.12:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/protobuf@v1.36.12"}]}, {"name": "gopkg.in/natefinch/lumberjack.v2", "SPDXID": "SPDXRef-Package-go-module-gopkg.in-natefinch-lumberjack.v2-49f92b8296741bb6", "versionInfo": "v2.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/gopkg.in/natefinch/lumberjack.v2@v2.2.1"}]}, {"name": "gopkg.in/natefinch/lumberjack.v2", "SPDXID": "SPDXRef-Package-go-module-gopkg.in-natefinch-lumberjack.v2-90894027420d5ecf", "versionInfo": "v2.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /oauth2-proxy-7.15.5/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/gopkg.in/natefinch/lumberjack.v2@v2.2.1"}]}, {"name": "oauth2-proxy/e2e-suite/.github/workflows/e2e.yml", "SPDXID": "SPDXRef-Package-github-action-workflow-oauth2-proxy-e2e-suite-.github-workflows-e2e.yml-3eba72a0c8ba3391", "versionInfo": "main", "supplier": "Organization: oauth2-proxy", "originator": "Organization: oauth2-proxy", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /oauth2-proxy-7.15.5/.github/workflows/e2e.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2-proxy\\/e2e-suite\\/.github\\/workflows\\/e2e.yml:oauth2-proxy\\/e2e-suite\\/.github\\/workflows\\/e2e.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2-proxy\\/e2e-suite\\/.github\\/workflows\\/e2e.yml:oauth2_proxy\\/e2e_suite\\/.github\\/workflows\\/e2e.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2_proxy\\/e2e_suite\\/.github\\/workflows\\/e2e.yml:oauth2-proxy\\/e2e-suite\\/.github\\/workflows\\/e2e.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2_proxy\\/e2e_suite\\/.github\\/workflows\\/e2e.yml:oauth2_proxy\\/e2e_suite\\/.github\\/workflows\\/e2e.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2-proxy\\/e2e:oauth2-proxy\\/e2e-suite\\/.github\\/workflows\\/e2e.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2-proxy\\/e2e:oauth2_proxy\\/e2e_suite\\/.github\\/workflows\\/e2e.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2_proxy\\/e2e:oauth2-proxy\\/e2e-suite\\/.github\\/workflows\\/e2e.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2_proxy\\/e2e:oauth2_proxy\\/e2e_suite\\/.github\\/workflows\\/e2e.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2:oauth2-proxy\\/e2e-suite\\/.github\\/workflows\\/e2e.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2:oauth2_proxy\\/e2e_suite\\/.github\\/workflows\\/e2e.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/oauth2-proxy/e2e-suite@main#.github/workflows/e2e.yml"}]}, {"name": "qltysh/qlty-action/coverage", "SPDXID": "SPDXRef-Package-github-action-qltysh-qlty-action-coverage-1d3d07a58487dd04", "versionInfo": "v2.4.0", "supplier": "Organization: qltysh", "originator": "Organization: qltysh", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /oauth2-proxy-7.15.5/.github/workflows/ci.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:qltysh\\/qlty-action\\/coverage:qltysh\\/qlty-action\\/coverage:v2.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:qltysh\\/qlty-action\\/coverage:qltysh\\/qlty_action\\/coverage:v2.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:qltysh\\/qlty_action\\/coverage:qltysh\\/qlty-action\\/coverage:v2.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:qltysh\\/qlty_action\\/coverage:qltysh\\/qlty_action\\/coverage:v2.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:qltysh\\/qlty:qltysh\\/qlty-action\\/coverage:v2.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:qltysh\\/qlty:qltysh\\/qlty_action\\/coverage:v2.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/qltysh/qlty-action@v2.4.0#coverage"}]}, {"name": "stdlib", "SPDXID": "SPDXRef-Package-go-module-stdlib-e92d03678c43fe24", "versionInfo": "go1.27.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /vendor/github.com/pierrec/lz4/v4/lz4.test", "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:go:1.27.1:-:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/stdlib@1.27.1"}]}, {"name": "rpm-extracted/oauth2-proxy-7.15.5-0.1.hum1.src", "SPDXID": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "oauth2-proxy", "SPDXID": "SPDXRef-Package-rpm-oauth2-proxy-61976c8471972b64", "versionInfo": "7.15.5-0.1.hum1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from RPM DB: /usr/lib/debug/usr/bin/oauth2-proxy-7.15.5-0.1.hum1.aarch64.debug", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2-proxy:oauth2-proxy:7.15.5-0.1.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2-proxy:oauth2_proxy:7.15.5-0.1.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2_proxy:oauth2-proxy:7.15.5-0.1.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2_proxy:oauth2_proxy:7.15.5-0.1.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2:oauth2-proxy:7.15.5-0.1.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2:oauth2_proxy:7.15.5-0.1.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/hummingbird/oauth2-proxy@7.15.5-0.1.hum1?distro=hummingbird-1"}]}, {"name": "rpm-extracted/oauth2-proxy-debuginfo-7.15.5-0.1.hum1.aarch64", "SPDXID": "SPDXRef-Directory-Root-oauth2-proxy-debuginfo-7.15.5-0.1.hum1.aarch64", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "rpm-extracted/oauth2-proxy-debugsource-7.15.5-0.1.hum1.aarch64", "SPDXID": "SPDXRef-Directory-Root-oauth2-proxy-debugsource-7.15.5-0.1.hum1.aarch64", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "cloud.google.com/go/auth", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-auth-5f43fedbab9a3790", "versionInfo": "v0.23.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:auth:v0.23.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/auth@v0.23.3"}]}, {"name": "cloud.google.com/go/auth/oauth2adapt", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-a944e8ac6e97183f", "versionInfo": "v0.2.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:auth\\/oauth2adapt:v0.2.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/auth@v0.2.8#oauth2adapt"}]}, {"name": "cloud.google.com/go/compute/metadata", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-a6015b03813f9ca4", "versionInfo": "v0.10.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:compute\\/metadata:v0.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/compute@v0.10.0#metadata"}]}, {"name": "github.com/a8m/envsubst", "SPDXID": "SPDXRef-Package-go-module-github.com-a8m-envsubst-f391e4bfd14b1376", "versionInfo": "v1.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:a8m:envsubst:v1.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/a8m/envsubst@v1.4.3"}]}, {"name": "github.com/beorn7/perks", "SPDXID": "SPDXRef-Package-go-module-github.com-beorn7-perks-2d1c436883816ba0", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:beorn7:perks:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/beorn7/perks@v1.0.1"}]}, {"name": "github.com/bitly/go-simplejson", "SPDXID": "SPDXRef-Package-go-module-github.com-bitly-go-simplejson-0a8bcb248eccba3a", "versionInfo": "v0.5.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bitly:go-simplejson:v0.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bitly:go_simplejson:v0.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bitly/go-simplejson@v0.5.1"}]}, {"name": "github.com/bsm/redislock", "SPDXID": "SPDXRef-Package-go-module-github.com-bsm-redislock-eb848350693389c5", "versionInfo": "v0.10.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bsm:redislock:v0.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bsm/redislock@v0.10.0"}]}, {"name": "github.com/cespare/xxhash/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-7ff40584371fde96", "versionInfo": "v2.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cespare/xxhash@v2.3.0#v2"}]}, {"name": "github.com/coreos/go-oidc/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-coreos-go-oidc-v3-a4a377b29b2fe283", "versionInfo": "v3.21.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go-oidc\\/v3:v3.21.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go_oidc\\/v3:v3.21.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/coreos/go-oidc@v3.21.0#v3"}]}, {"name": "github.com/coreos/go-systemd", "SPDXID": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-e25a6477992833ee", "versionInfo": "v0.0.0-20191104093116-d3cd4ed1dbcf", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go-systemd:v0.0.0-20191104093116-d3cd4ed1dbcf:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go_systemd:v0.0.0-20191104093116-d3cd4ed1dbcf:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/coreos/go-systemd@v0.0.0-20191104093116-d3cd4ed1dbcf"}]}, {"name": "github.com/felixge/httpsnoop", "SPDXID": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-3f2b4cabd1ec68b3", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:felixge:httpsnoop:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/felixge/httpsnoop@v1.1.0"}]}, {"name": "github.com/fsnotify/fsnotify", "SPDXID": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-58935338c677fef7", "versionInfo": "v1.10.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fsnotify:fsnotify:v1.10.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fsnotify/fsnotify@v1.10.1"}]}, {"name": "github.com/go-jose/go-jose/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v3-0d2fde32c34d0005", "versionInfo": "v3.0.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go-jose\\/v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go_jose\\/v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go-jose\\/v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go_jose\\/v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-jose\\/v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_jose\\/v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-jose/go-jose@v3.0.5#v3"}]}, {"name": "github.com/go-jose/go-jose/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-9e9a24b71cbb19e7", "versionInfo": "v4.1.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go-jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go_jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go-jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go_jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-jose/go-jose@v4.1.5#v4"}]}, {"name": "github.com/go-logr/logr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-logr-fe381137a5873e1c", "versionInfo": "v1.4.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:logr:v1.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:logr:v1.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:logr:v1.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/logr@v1.4.4"}]}, {"name": "github.com/go-logr/stdr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-stdr-787d4adeda14b912", "versionInfo": "v1.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/stdr@v1.2.2"}]}, {"name": "github.com/go-viper/mapstructure/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-21cb0dd8e257f102", "versionInfo": "v2.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-viper/mapstructure@v2.5.0#v2"}]}, {"name": "github.com/golang-jwt/jwt/v5", "SPDXID": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-bcd964e6b168aa67", "versionInfo": "v5.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang-jwt:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang_jwt:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/golang-jwt/jwt@v5.3.1#v5"}]}, {"name": "github.com/google/s2a-go", "SPDXID": "SPDXRef-Package-go-module-github.com-google-s2a-go-33af57ae3890155f", "versionInfo": "v0.1.10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:s2a-go:v0.1.10:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:s2a_go:v0.1.10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/s2a-go@v0.1.10"}]}, {"name": "github.com/google/uuid", "SPDXID": "SPDXRef-Package-go-module-github.com-google-uuid-979be3a779ba48c7", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/uuid@v1.6.0"}]}, {"name": "github.com/googleapis/enterprise-certificate-proxy", "SPDXID": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-2d8ac36729f5ca8c", "versionInfo": "v0.3.22", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:enterprise-certificate-proxy:v0.3.22:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:enterprise_certificate_proxy:v0.3.22:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.22"}]}, {"name": "github.com/googleapis/gax-go/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-a2750cbc0a6eec68", "versionInfo": "v2.24.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:gax-go\\/v2:v2.24.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:gax_go\\/v2:v2.24.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/googleapis/gax-go@v2.24.1#v2"}]}, {"name": "github.com/gorilla/mux", "SPDXID": "SPDXRef-Package-go-module-github.com-gorilla-mux-72c451d1035c4ca5", "versionInfo": "v1.8.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gorilla:mux:v1.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gorilla/mux@v1.8.1"}]}, {"name": "github.com/justinas/alice", "SPDXID": "SPDXRef-Package-go-module-github.com-justinas-alice-b3b7b27d3c37b6cc", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:justinas:alice:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/justinas/alice@v1.2.0"}]}, {"name": "github.com/munnerz/goautoneg", "SPDXID": "SPDXRef-Package-go-module-github.com-munnerz-goautoneg-e521c77e5d7f6d16", "versionInfo": "v0.0.0-20191010083416-a7dc8b61c822", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:munnerz:goautoneg:v0.0.0-20191010083416-a7dc8b61c822:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822"}]}, {"name": "github.com/oauth2-proxy/oauth2-proxy/v7", "SPDXID": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "versionInfo": "UNKNOWN", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2-proxy:oauth2-proxy\\/v7:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2-proxy:oauth2_proxy\\/v7:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2_proxy:oauth2-proxy\\/v7:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2_proxy:oauth2_proxy\\/v7:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2:oauth2-proxy\\/v7:*:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2:oauth2_proxy\\/v7:*:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/oauth2-proxy/oauth2-proxy#v7"}]}, {"name": "github.com/pelletier/go-toml/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-2b9244e9f52954a8", "versionInfo": "v2.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pelletier:go-toml\\/v2:v2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pelletier:go_toml\\/v2:v2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pelletier/go-toml@v2.4.3#v2"}]}, {"name": "github.com/pierrec/lz4/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-9f2237f2244db918", "versionInfo": "v4.1.31", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pierrec:lz4\\/v4:v4.1.31:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pierrec/lz4@v4.1.31#v4"}]}, {"name": "github.com/prometheus/client_golang", "SPDXID": "SPDXRef-Package-go-module-github.com-prometheus-client-golang-7f00725835fc4de7", "versionInfo": "v1.24.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:client-golang:v1.24.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:client_golang:v1.24.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/prometheus/client_golang@v1.24.1"}]}, {"name": "github.com/prometheus/client_model", "SPDXID": "SPDXRef-Package-go-module-github.com-prometheus-client-model-65b34217fd67747f", "versionInfo": "v0.6.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:client-model:v0.6.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:client_model:v0.6.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/prometheus/client_model@v0.6.2"}]}, {"name": "github.com/prometheus/common", "SPDXID": "SPDXRef-Package-go-module-github.com-prometheus-common-c1097608542e286e", "versionInfo": "v0.70.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:common:v0.70.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/prometheus/common@v0.70.1"}]}, {"name": "github.com/prometheus/procfs", "SPDXID": "SPDXRef-Package-go-module-github.com-prometheus-procfs-937c2df5f1370fbf", "versionInfo": "v0.21.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:prometheus:procfs:v0.21.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/prometheus/procfs@v0.21.1"}]}, {"name": "github.com/redis/go-redis/v9", "SPDXID": "SPDXRef-Package-go-module-github.com-redis-go-redis-v9-b3f7cd928233ec77", "versionInfo": "v9.22.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:redis:go-redis\\/v9:v9.22.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:redis:go_redis\\/v9:v9.22.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/redis/go-redis@v9.22.0#v9"}]}, {"name": "github.com/sagikazarmark/locafero", "SPDXID": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-bdd8e9da61b23d1b", "versionInfo": "v0.12.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sagikazarmark:locafero:v0.12.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sagikazarmark/locafero@v0.12.0"}]}, {"name": "github.com/spf13/afero", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-afero-72c2cb05f7aa4de4", "versionInfo": "v1.15.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:afero:v1.15.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/afero@v1.15.0"}]}, {"name": "github.com/spf13/cast", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-cast-b2e8cbaecb041cae", "versionInfo": "v1.10.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:cast:v1.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/cast@v1.10.0"}]}, {"name": "github.com/spf13/pflag", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-pflag-3df63e55668c61a1", "versionInfo": "v1.0.10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:pflag:v1.0.10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/pflag@v1.0.10"}]}, {"name": "github.com/spf13/viper", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-viper-bec3802e8a634615", "versionInfo": "v1.21.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:viper:v1.21.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/viper@v1.21.0"}]}, {"name": "github.com/subosito/gotenv", "SPDXID": "SPDXRef-Package-go-module-github.com-subosito-gotenv-f163a1ba655b9e78", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:subosito:gotenv:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/subosito/gotenv@v1.6.0"}]}, {"name": "github.com/vmihailenco/msgpack/v5", "SPDXID": "SPDXRef-Package-go-module-github.com-vmihailenco-msgpack-v5-d9453490f5d06693", "versionInfo": "v5.4.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vmihailenco:msgpack\\/v5:v5.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vmihailenco/msgpack@v5.4.1#v5"}]}, {"name": "github.com/vmihailenco/tagparser/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-vmihailenco-tagparser-v2-3f52a5b807e53810", "versionInfo": "v2.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vmihailenco:tagparser\\/v2:v2.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vmihailenco/tagparser@v2.0.0#v2"}]}, {"name": "go.opentelemetry.io/auto/sdk", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-3b97f45bf98bb751", "versionInfo": "v1.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:auto:sdk:v1.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1"}]}, {"name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-174ea8b83429f46a", "versionInfo": "v0.70.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/otelhttp:v0.70.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation@v0.70.0#net/http/otelhttp"}]}, {"name": "go.opentelemetry.io/otel", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-81ff13065ca8d780", "versionInfo": "v1.45.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel@v1.45.0"}]}, {"name": "go.opentelemetry.io/otel/metric", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-5b043773d4c09eb4", "versionInfo": "v1.45.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:metric:v1.45.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/metric@v1.45.0"}]}, {"name": "go.opentelemetry.io/otel/trace", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-4fad0347362a3c70", "versionInfo": "v1.45.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:trace:v1.45.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/trace@v1.45.0"}]}, {"name": "go.uber.org/atomic", "SPDXID": "SPDXRef-Package-go-module-go.uber.org-atomic-a9a92573a401cfb0", "versionInfo": "v1.11.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.uber.org/atomic@v1.11.0"}]}, {"name": "go.yaml.in/yaml/v3", "SPDXID": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-5c2d0a3b3e07bd9e", "versionInfo": "v3.0.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml:v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.yaml.in/yaml/v3@v3.0.5"}]}, {"name": "golang.org/x/crypto", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-crypto-6db5391b1adda5f6", "versionInfo": "v0.57.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:ssh:v0.57.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/crypto@v0.57.0"}]}, {"name": "golang.org/x/net", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-net-cde1a31bc9b77b0e", "versionInfo": "v0.59.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:networking:v0.59.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/net@v0.59.0"}]}, {"name": "golang.org/x/oauth2", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-oauth2-a2686f3a4fe008cc", "versionInfo": "v0.37.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/oauth2:v0.37.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/oauth2@v0.37.0"}]}, {"name": "golang.org/x/sync", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sync-9bc2dc8bde79c11c", "versionInfo": "v0.23.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sync:v0.23.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sync@v0.23.0"}]}, {"name": "golang.org/x/sys", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sys-e4772e27db8bbb1e", "versionInfo": "v0.48.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sys:v0.48.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sys@v0.48.0"}]}, {"name": "golang.org/x/text", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-text-baa9f7b013339354", "versionInfo": "v0.42.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:text:v0.42.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/text@v0.42.0"}]}, {"name": "google.golang.org/api", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-api-dc910c3153ecf387", "versionInfo": "v0.299.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:api:v0.299.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/api@v0.299.0"}]}, {"name": "google.golang.org/genproto/googleapis/rpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-1cbd6361c8e4626b", "versionInfo": "v0.0.0-20260921155816-b14227669459", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260921155816-b14227669459:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260921155816-b14227669459#rpc"}]}, {"name": "google.golang.org/grpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-grpc-f90035a7c4571ca9", "versionInfo": "v1.84.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:grpc:v1.84.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/grpc@v1.84.0"}]}, {"name": "google.golang.org/protobuf", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-protobuf-6d618e2d79de155b", "versionInfo": "v1.36.12", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:protobuf:v1.36.12:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/protobuf@v1.36.12"}]}, {"name": "gopkg.in/natefinch/lumberjack.v2", "SPDXID": "SPDXRef-Package-go-module-gopkg.in-natefinch-lumberjack.v2-9746d7179f41ed6f", "versionInfo": "v2.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/gopkg.in/natefinch/lumberjack.v2@v2.2.1"}]}, {"name": "oauth2-proxy", "SPDXID": "SPDXRef-Package-rpm-oauth2-proxy-4d3d11c07cc947c0", "versionInfo": "7.15.5-0.1.hum1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from RPM DB: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2-proxy:oauth2-proxy:7.15.5-0.1.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2-proxy:oauth2_proxy:7.15.5-0.1.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2_proxy:oauth2-proxy:7.15.5-0.1.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2_proxy:oauth2_proxy:7.15.5-0.1.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2:oauth2-proxy:7.15.5-0.1.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2:oauth2_proxy:7.15.5-0.1.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/hummingbird/oauth2-proxy@7.15.5-0.1.hum1?distro=hummingbird-1"}]}, {"name": "stdlib", "SPDXID": "SPDXRef-Package-go-module-stdlib-2c42485889b8fda2", "versionInfo": "go1.27.1-X:nodwarf5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/oauth2-proxy", "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:go:1.27.1:-:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/stdlib@1.27.1-X%3Anodwarf5"}]}, {"name": "rpm-extracted/oauth2-proxy-7.15.5-0.1.hum1.x86_64", "SPDXID": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "oauth2-proxy", "SPDXID": "SPDXRef-Package-rpm-oauth2-proxy-a4ffec08a57c8b23", "versionInfo": "7.15.5-0.1.hum1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from RPM DB: /usr/lib/debug/usr/bin/oauth2-proxy-7.15.5-0.1.hum1.x86_64.debug", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2-proxy:oauth2-proxy:7.15.5-0.1.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2-proxy:oauth2_proxy:7.15.5-0.1.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2_proxy:oauth2-proxy:7.15.5-0.1.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2_proxy:oauth2_proxy:7.15.5-0.1.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2:oauth2-proxy:7.15.5-0.1.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:oauth2:oauth2_proxy:7.15.5-0.1.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/hummingbird/oauth2-proxy@7.15.5-0.1.hum1?distro=hummingbird-1"}]}, {"name": "rpm-extracted/oauth2-proxy-debuginfo-7.15.5-0.1.hum1.x86_64", "SPDXID": "SPDXRef-Directory-Root-oauth2-proxy-debuginfo-7.15.5-0.1.hum1.x86-64", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "rpm-extracted/oauth2-proxy-debugsource-7.15.5-0.1.hum1.x86_64", "SPDXID": "SPDXRef-Directory-Root-oauth2-proxy-debugsource-7.15.5-0.1.hum1.x86-64", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}], "files": [{"fileName": "usr/bin/oauth2-proxy", "SPDXID": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "fileTypes": ["APPLICATION", "BINARY"], "checksums": [{"algorithm": "SHA1", "checksumValue": "b876b51f3c78254527d39c501c4030c4b18d1124"}, {"algorithm": "SHA256", "checksumValue": "9b73d1436f19b67a1900753c70b510c9388643fb92fd66ae3bd6a767d3793686"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "go.mod", "SPDXID": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "ca102623a3447ef55be5f84fd1622abee97744ac"}, {"algorithm": "SHA256", "checksumValue": "858d50b13c17fbbef51eca9faeceeba8bf2e998ccfbc23ea197d67790026c7db"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "oauth2-proxy-7.15.5/.github/workflows/ci.yml", "SPDXID": "SPDXRef-File-....github-workflows-ci.yml-9ac397ae99d7ae00", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "968ed393a6d35b7a97ed3dff1b4502cc90602f7f"}, {"algorithm": "SHA256", "checksumValue": "75a95311459dcf199ab067688f9a6ad144eaad303a6743c75e8c8735398ab09e"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "oauth2-proxy-7.15.5/.github/workflows/codeql.yml", "SPDXID": "SPDXRef-File-....github-workflows-codeql.yml-f8476e0bd85419ba", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "b20161109f8678aae5c8cde7560dd86e26f80e98"}, {"algorithm": "SHA256", "checksumValue": "e190b0c24b72d32b7cfe8bdc724c28ec5b62ba21a0dbb5ae634b867b3ee2d2fc"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "oauth2-proxy-7.15.5/.github/workflows/create-release.yml", "SPDXID": "SPDXRef-File-....github-workflows-create-release.yml-9440102cdcc86900", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "54579178f13d8ea5884b6160365e4c3692889033"}, {"algorithm": "SHA256", "checksumValue": "6790c362ec134b6a9a5584208d39c5f6cb908b8f3cfb4d70471cc4b53b2f0c8a"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "oauth2-proxy-7.15.5/.github/workflows/docs.yml", "SPDXID": "SPDXRef-File-....github-workflows-docs.yml-5aa70a599edfceed", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "6723f510600ebea851c91ef4505ef19844b3b2c4"}, {"algorithm": "SHA256", "checksumValue": "e7d7eadbcd7d166ab9985fa42a07505f53c881ae53e2f33adf46305b66826cd7"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "oauth2-proxy-7.15.5/.github/workflows/e2e.yml", "SPDXID": "SPDXRef-File-....github-workflows-e2e.yml-69eac746a5a05010", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "4be31c5ec807e93e789972afb5ca33d8a42e58e9"}, {"algorithm": "SHA256", "checksumValue": "babfef298c192f25d36836671b1246e98184a398c315892a9bef641a9aae4551"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "oauth2-proxy-7.15.5/.github/workflows/labeler.yml", "SPDXID": "SPDXRef-File-....github-workflows-labeler.yml-9654aabda1a01f03", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "95312d41e0884b674958f78358611998805b7e63"}, {"algorithm": "SHA256", "checksumValue": "a6b74010a9b6398ec5610e0dabfecd92502bfc54198cd6ebd93cf71ee7173133"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "oauth2-proxy-7.15.5/.github/workflows/nightly.yml", "SPDXID": "SPDXRef-File-....github-workflows-nightly.yml-498c3882053e4800", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "34b2ace3b5c69f22b8713f3fe9626d78486d33fd"}, {"algorithm": "SHA256", "checksumValue": "2c6f3444411f6c5c9b74ad69b9ca8d80e9c009789dba9f43130e8dabcb61d1a4"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "oauth2-proxy-7.15.5/.github/workflows/prow.yml", "SPDXID": "SPDXRef-File-....github-workflows-prow.yml-780e0a0d56289ef2", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "8f13535093f3554040f91224f535c19323037b10"}, {"algorithm": "SHA256", "checksumValue": "ac523a2414dd2ce1fe8a307bd76ffa77775389a59ca1abb7a108e2d60057c56f"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "oauth2-proxy-7.15.5/.github/workflows/publish-release.yml", "SPDXID": "SPDXRef-File-....github-workflows-publish-release.yml-ac540a0098332f55", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "3093dff7bdd6d349a3adce55fc0ba80690dd7365"}, {"algorithm": "SHA256", "checksumValue": "3f45d285a7a5eb68663e798e9a605c2e589667533803a4b659eb245c254e131d"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "oauth2-proxy-7.15.5/.github/workflows/stale.yml", "SPDXID": "SPDXRef-File-....github-workflows-stale.yml-ca18ce9920b556e4", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "626704989a68b1a29865b6dd6a559f12a6af888b"}, {"algorithm": "SHA256", "checksumValue": "ede68362473a19f1a9c36eaee00ac6780040820fcbac73ac41fc905e92d3d02d"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "oauth2-proxy-7.15.5/go.mod", "SPDXID": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "ca102623a3447ef55be5f84fd1622abee97744ac"}, {"algorithm": "SHA256", "checksumValue": "858d50b13c17fbbef51eca9faeceeba8bf2e998ccfbc23ea197d67790026c7db"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "vendor/github.com/pierrec/lz4/v4/lz4.test", "SPDXID": "SPDXRef-File-...github.com-pierrec-lz4-v4-lz4.test-7428caa659fe504a", "fileTypes": ["APPLICATION", "BINARY"], "checksums": [{"algorithm": "SHA1", "checksumValue": "1a75cecc90dea526fb565e4c608820a6d4c0795d"}, {"algorithm": "SHA256", "checksumValue": "51a98de38074688524ee85b5f6c8fce1d187ed8a4f799628eee274840b75a744"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "vendor/go.opentelemetry.io/otel/requirements.txt", "SPDXID": "SPDXRef-File-...otel-requirements.txt-b69fd806af1e91ad", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "a8103c62e89df627de9391e00afc983d8dcc59a5"}, {"algorithm": "SHA256", "checksumValue": "58b5554458d50b191e6db6e5c63365741adb4dccab5b57fb295196b871abcda6"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/lib/debug/usr/bin/oauth2-proxy-7.15.5-0.1.hum1.aarch64.debug", "SPDXID": "SPDXRef-File-...oauth2-proxy-7.15.5-0.1.hum1.aarch64.debug-d0595015f54763b7", "fileTypes": ["APPLICATION", "BINARY"], "checksums": [{"algorithm": "SHA1", "checksumValue": "f38bc257b8428b0043d3becff737106b2f4e9ce9"}, {"algorithm": "SHA256", "checksumValue": "0dd0d9af1d840655a340ddaa78262d20942046b1e678c4b6bb7f0097b52f3457"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/bin/oauth2-proxy", "SPDXID": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "fileTypes": ["APPLICATION", "BINARY"], "checksums": [{"algorithm": "SHA1", "checksumValue": "a4d2ed9868a3b5ab754839cfd795f130156b5309"}, {"algorithm": "SHA256", "checksumValue": "9d8b7e93b48e16d5e09f1d13d12dfb2096d84c5850e70f29727796653a8c85de"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/lib/debug/usr/bin/oauth2-proxy-7.15.5-0.1.hum1.x86_64.debug", "SPDXID": "SPDXRef-File-...oauth2-proxy-7.15.5-0.1.hum1.x86-64.debug-1bc967a26b9ce7e8", "fileTypes": ["APPLICATION", "BINARY"], "checksums": [{"algorithm": "SHA1", "checksumValue": "60433b15fbce0f9d5d0de7bb83e7d16b81131fb8"}, {"algorithm": "SHA256", "checksumValue": "b00f372c583874dadb09c14ff71fefe1a16d5658a1eb234aadda766c2b79c2a5"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}], "relationships": [{"spdxElementId": "SPDXRef-DOCUMENT", "relationshipType": "DESCRIBES", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-aarch64-oauth2-proxy", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-x86-64-oauth2-proxy", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-aarch64-oauth2-proxy-debuginfo", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-x86-64-oauth2-proxy-debuginfo", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-aarch64-oauth2-proxy-debugsource", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-x86-64-oauth2-proxy-debugsource", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source0"}, {"spdxElementId": "SPDXRef-Source0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Source0-origin"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source1"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source2"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-R-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-add-determinism-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-alternatives-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-annobin-docs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-annobin-plugin-gcc-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ansible-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-askalono-cli-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-audit-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bash-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-binutils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-build-reproducibility-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bzip2-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bzip2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ca-certificates-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cmake-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-coreutils-common-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-coreutils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cpio-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cpp-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-crypto-policies-config-default-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-crypto-policies-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-curl-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cyrus-sasl-lib-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-debugedit-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-diffutils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-dwz-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ed-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-efi-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-debuginfod-client-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-libelf-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-erlang-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-expat-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-file-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-filesystem-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-filesystem-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-file-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-findutils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-fonts-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-forge-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-fpc-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gap-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gawk-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gcc-plugin-annobin-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gcc-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gdb-minimal-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gdbm-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ghc-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-common-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-gconv-extra-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-minimal-langpack-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gmp-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnat-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnome-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnulib-l10n-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-dirmngr-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-gpg-agent-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-gpgconf-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-keyboxd-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-verify-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnutls-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-filesystem-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-rpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-vendor-tools-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-bin-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-src-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golist-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gpgverify-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-grep-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gzip-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-gpg-keys-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-release-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-repos-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ima-evm-utils-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-info-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-jansson-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-java-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-json-c-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-kernel-headers-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-kernel-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-keyutils-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-krb5-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libacl-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libarchive-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libasan-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libassuan-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libatomic-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libattr-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libblkid-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libbrotli-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcap-ng-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcap-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcbor-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcom-err-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcurl-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libeconf-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libevent-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfdisk-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libffi-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfido2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfsverity-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgcc-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgcrypt-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgomp-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgpg-error-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libidn2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libksba-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-liblastlog2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libmount-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libmpc-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnghttp2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnghttp3-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpfm-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpkgconf-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpsl-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libselinux-utils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libselinux-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsemanage-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsepol-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsmartcols-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libssh-config-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libssh-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libstdc++-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtasn1-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtool-ltdl-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libubsan-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libunistring-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libusb1-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libuuid-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libverto-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxcrypt-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxcrypt-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxml2-16-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libzstd-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-linkdupes-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lua-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lua-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lz4-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-make-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-meson-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-mpdecimal-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-mpfr-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ncurses-base-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ncurses-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-nettle-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ngtcp2-crypto-ossl-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ngtcp2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-npth-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ocaml-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openblas-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openldap-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssl-fips-provider-upstream-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssl-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-p11-kit-trust-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-p11-kit-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-package-notes-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pam-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-patch-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-syntax-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-perl-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-m4-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-pkg-config-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-policycoreutils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-popt-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-publicsuffix-list-dafsa-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pyproject-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python-pip-wheel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-boolean.py-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-license-expression-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-qt5-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-qt6-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-readline-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-redhat-rpm-config-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-build-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-build-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-plugin-selinux-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-sequoia-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-sign-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rust-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sed-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-selinux-policy-targeted-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-selinux-policy-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-setup-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-shadow-utils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sqlite-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-standalone-sysusers-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tar-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tpm2-tss-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tree-sitter-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tzdata-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-unzip-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-util-linux-core-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-util-linux-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-which-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xxhash-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xz-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xz-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zig-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zip-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zlib-ng-compat-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zstd-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-aarch64-oauth2-proxy"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-aarch64-oauth2-proxy-debuginfo"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-aarch64", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-aarch64-oauth2-proxy-debugsource"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-R-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-add-determinism-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-alternatives-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-annobin-docs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-annobin-plugin-gcc-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ansible-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-askalono-cli-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-audit-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bash-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-binutils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-build-reproducibility-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bzip2-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bzip2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ca-certificates-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cmake-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-coreutils-common-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-coreutils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cpio-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cpp-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-crypto-policies-config-default-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-crypto-policies-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-curl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cyrus-sasl-lib-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-debugedit-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-diffutils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-dwz-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ed-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-efi-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-debuginfod-client-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-libelf-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-erlang-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-expat-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-file-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-filesystem-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-filesystem-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-file-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-findutils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-fonts-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-forge-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-fpc-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gap-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gawk-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gcc-plugin-annobin-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gcc-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gdb-minimal-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gdbm-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ghc-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-common-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-gconv-extra-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-minimal-langpack-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gmp-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnat-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnome-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnulib-l10n-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-dirmngr-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-gpg-agent-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-gpgconf-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-keyboxd-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-verify-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnutls-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-filesystem-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-rpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-vendor-tools-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-bin-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-src-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golist-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gpgverify-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-grep-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gzip-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-gpg-keys-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-release-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-repos-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ima-evm-utils-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-info-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-jansson-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-java-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-json-c-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-kernel-headers-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-kernel-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-keyutils-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-krb5-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libacl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libarchive-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libassuan-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libatomic-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libattr-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libblkid-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libbrotli-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcap-ng-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcap-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcbor-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcom-err-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcurl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libeconf-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libevent-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfdisk-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libffi-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfido2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfsverity-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgcc-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgcrypt-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgomp-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgpg-error-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libidn2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libksba-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-liblastlog2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libmount-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libmpc-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnghttp2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnghttp3-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpfm-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpkgconf-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpsl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libselinux-utils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libselinux-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsemanage-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsepol-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsmartcols-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libssh-config-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libssh-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libstdc++-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtasn1-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtool-ltdl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libunistring-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libusb1-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libuuid-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libverto-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxcrypt-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxcrypt-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxml2-16-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libzstd-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-linkdupes-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lua-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lua-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lz4-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-make-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-meson-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-mpdecimal-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-mpfr-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ncurses-base-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ncurses-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-nettle-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ngtcp2-crypto-ossl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ngtcp2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-npth-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ocaml-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openblas-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openldap-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssl-fips-provider-upstream-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssl-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-p11-kit-trust-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-p11-kit-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-package-notes-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pam-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-patch-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-syntax-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-perl-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-m4-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-pkg-config-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-policycoreutils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-popt-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-publicsuffix-list-dafsa-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pyproject-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python-pip-wheel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-boolean.py-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-license-expression-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-qt5-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-qt6-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-readline-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-redhat-rpm-config-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-build-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-build-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-plugin-selinux-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-sequoia-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-sign-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rust-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sed-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-selinux-policy-targeted-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-selinux-policy-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-setup-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-shadow-utils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sqlite-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-standalone-sysusers-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tar-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tpm2-tss-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tree-sitter-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tzdata-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-unzip-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-util-linux-core-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-util-linux-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-which-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xxhash-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xz-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xz-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zig-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zip-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zlib-ng-compat-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zstd-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-x86-64-oauth2-proxy"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-x86-64-oauth2-proxy-debuginfo"}, {"spdxElementId": "SPDXRef-Buildroot-oauth2-proxy-x86-64", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-x86-64-oauth2-proxy-debugsource"}, {"spdxElementId": "SPDXRef-Package-go-module-go.uber.org-atomic-0179ccd25c7cfc3c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-02a66289ca81571e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-1e07a409f55b51cc", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-1f3c8a5c21fd4bf4", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-2166ea786e2aa958", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-client-golang-23c9349b1cd4e7b3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-redis-go-redis-v9-2445e1c6720f51cb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-280dfb911707b75b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cast-2bf5afaa597368f2", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-stdlib-2c42485889b8fda2", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-311c5e4737dc5f46", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-3128efecf2c3c59c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-33255e57fa255f7e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-common-33b25ff75d48adce", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-35c8f605b1a8788a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-3a1b78383c78f2ff", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-3b648a627d596017", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-afero-41bd0670885f6228", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-beorn7-perks-443417a163ba4ee8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-munnerz-goautoneg-447190b0d258ce9a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-s2a-go-4adbc4acc276fe63", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-4f9ba7d92050fd80", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-54a7022d4fc18b33", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bsm-redislock-55a82de9e152d1cd", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-59ab029f98086e04", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-client-model-5db8f01f19e531ef", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-viper-621921ec50041f89", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-64cb08a067d483e6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-67e2658d150ee426", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v3-6b557d298c52b46d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vmihailenco-tagparser-v2-6bd3f82ee3a7af2c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-6f49a2ebbc498a59", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-84dba51e0c474cbc", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-justinas-alice-88d3eeb7d3076538", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-api-8a72a5928558c897", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vmihailenco-msgpack-v5-96e5e66fb2c3052b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gorilla-mux-9774676626ac4591", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-oidc-v3-9b3f81944e9acbc3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-a34e52240c4cd8a4", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-a85c2006648aa9d7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-a9396e0595349589", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-b7bf563bb95010c0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-natefinch-lumberjack.v2-b8cd966ac2420c1f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-bbe7343413c52d03", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-be0608faa4df0d67", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-c109651cf85a8054", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-c79227cb089c32ae", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-cbb90ab15138faf2", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-cc833e1ed2c1dcff", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-subosito-gotenv-d34968d89be4ce38", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-dcae5cbd284a6c85", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-procfs-ddc3b784d40f8d23", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-ddd26bccda51578c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-oauth2-e02f1abd961bcad0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-e8f7701c35318468", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-f1c6b1e239e9db0a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-f32fe5cc5bec0cb7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-a8m-envsubst-f75fccb262c09c7a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bitly-go-simplejson-f9e4eaf46c56ae6a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.uber.org-atomic-0179ccd25c7cfc3c", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-02a66289ca81571e", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-1e07a409f55b51cc", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-1f3c8a5c21fd4bf4", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-2166ea786e2aa958", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-client-golang-23c9349b1cd4e7b3", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-redis-go-redis-v9-2445e1c6720f51cb", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-280dfb911707b75b", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cast-2bf5afaa597368f2", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-stdlib-2c42485889b8fda2", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-311c5e4737dc5f46", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-3128efecf2c3c59c", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-33255e57fa255f7e", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-common-33b25ff75d48adce", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-35c8f605b1a8788a", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-3a1b78383c78f2ff", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-3b648a627d596017", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-afero-41bd0670885f6228", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-beorn7-perks-443417a163ba4ee8", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-munnerz-goautoneg-447190b0d258ce9a", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-s2a-go-4adbc4acc276fe63", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-4f9ba7d92050fd80", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-54a7022d4fc18b33", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bsm-redislock-55a82de9e152d1cd", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-59ab029f98086e04", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-client-model-5db8f01f19e531ef", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-viper-621921ec50041f89", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-64cb08a067d483e6", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-67e2658d150ee426", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v3-6b557d298c52b46d", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vmihailenco-tagparser-v2-6bd3f82ee3a7af2c", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-6f49a2ebbc498a59", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-84dba51e0c474cbc", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-justinas-alice-88d3eeb7d3076538", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-api-8a72a5928558c897", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vmihailenco-msgpack-v5-96e5e66fb2c3052b", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gorilla-mux-9774676626ac4591", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-oidc-v3-9b3f81944e9acbc3", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-a34e52240c4cd8a4", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-a85c2006648aa9d7", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-a9396e0595349589", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-b7bf563bb95010c0", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-natefinch-lumberjack.v2-b8cd966ac2420c1f", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-bbe7343413c52d03", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-be0608faa4df0d67", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-c109651cf85a8054", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-c79227cb089c32ae", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-cbb90ab15138faf2", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-cc833e1ed2c1dcff", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-subosito-gotenv-d34968d89be4ce38", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-rpm-oauth2-proxy-da0d110d71b7ee84", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-dcae5cbd284a6c85", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-procfs-ddc3b784d40f8d23", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-ddd26bccda51578c", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-oauth2-e02f1abd961bcad0", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-e8f7701c35318468", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-f1c6b1e239e9db0a", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-f32fe5cc5bec0cb7", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-a8m-envsubst-f75fccb262c09c7a", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bitly-go-simplejson-f9e4eaf46c56ae6a", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-auth-a34e52240c4cd8a4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-bbe7343413c52d03", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-4f9ba7d92050fd80", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-a8m-envsubst-f75fccb262c09c7a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-beorn7-perks-443417a163ba4ee8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bitly-go-simplejson-f9e4eaf46c56ae6a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bsm-redislock-55a82de9e152d1cd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-67e2658d150ee426", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-coreos-go-oidc-v3-9b3f81944e9acbc3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-33255e57fa255f7e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-280dfb911707b75b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-f32fe5cc5bec0cb7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v3-6b557d298c52b46d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-3a1b78383c78f2ff", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-logr-3128efecf2c3c59c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-stdr-c79227cb089c32ae", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-cbb90ab15138faf2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-be0608faa4df0d67", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-s2a-go-4adbc4acc276fe63", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-uuid-cc833e1ed2c1dcff", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-1f3c8a5c21fd4bf4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-2166ea786e2aa958", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gorilla-mux-9774676626ac4591", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-justinas-alice-88d3eeb7d3076538", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-munnerz-goautoneg-447190b0d258ce9a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-3df9c52479948f5a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-e8f7701c35318468", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-84dba51e0c474cbc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-prometheus-client-golang-23c9349b1cd4e7b3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-prometheus-client-model-5db8f01f19e531ef", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-prometheus-common-33b25ff75d48adce", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-prometheus-procfs-ddc3b784d40f8d23", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-redis-go-redis-v9-2445e1c6720f51cb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-a85c2006648aa9d7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-afero-41bd0670885f6228", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-cast-2bf5afaa597368f2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-pflag-6f49a2ebbc498a59", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-viper-621921ec50041f89", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-subosito-gotenv-d34968d89be4ce38", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vmihailenco-msgpack-v5-96e5e66fb2c3052b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vmihailenco-tagparser-v2-6bd3f82ee3a7af2c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-a9396e0595349589", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-f1c6b1e239e9db0a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-ddd26bccda51578c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-b7bf563bb95010c0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-1e07a409f55b51cc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.uber.org-atomic-0179ccd25c7cfc3c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-311c5e4737dc5f46", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-crypto-35c8f605b1a8788a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-net-64cb08a067d483e6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-oauth2-e02f1abd961bcad0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sync-59ab029f98086e04", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sys-02a66289ca81571e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-text-c109651cf85a8054", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-api-8a72a5928558c897", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-54a7022d4fc18b33", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-grpc-dcae5cbd284a6c85", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-protobuf-3b648a627d596017", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-gopkg.in-natefinch-lumberjack.v2-b8cd966ac2420c1f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-rpm-oauth2-proxy-da0d110d71b7ee84", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-stdlib-2c42485889b8fda2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-aarch64-oauth2-proxy", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.aarch64"}, {"spdxElementId": "SPDXRef-Package-go-module-stdlib-e92d03678c43fe24", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-75058587b03d7e92", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-0055873c0ce1a39b", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-032d64e7b2c5e72b", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kylelemons-godebug-054bf546a3d78ff8", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bsm-redislock-0595d34521830333", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-05eb82ff5b803225", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-07f46c4978384982", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-alicebob-miniredis-v2-0b57e7b5be7ad969", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-procfs-0ef72c0ebd3b9e95", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-common-0f58d85c7e917ff8", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-pprof-0f80dceb464406c3", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-oauth2-proxy-mockoidc-113c526798afb772", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-157b8ddd112253dc", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-1782e870745f5986", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-mod-1a4f31dfee761654", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-github-codeql-action-autobuild-1a727b06868c6d1b", "relatedSpdxElement": "SPDXRef-File-....github-workflows-codeql.yml-f8476e0bd85419ba", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-docker-setup-qemu-action-1bc474989a71a1d2", "relatedSpdxElement": "SPDXRef-File-....github-workflows-publish-release.yml-ac540a0098332f55", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gorilla-mux-1c336ba736cfbc03", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-1c59d62db54de586", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-tools-1d0c1f0fc356ce03", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-qltysh-qlty-action-coverage-1d3d07a58487dd04", "relatedSpdxElement": "SPDXRef-File-....github-workflows-ci.yml-9ac397ae99d7ae00", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-yuin-gopher-lua-1fe780299c4cc589", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-21924c216340421a", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vmihailenco-tagparser-v2-222d59278bef4f28", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-s2a-go-22bdda956c4ad01a", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-22bf94b873e909e4", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-docker-login-action-234893657f3f708f", "relatedSpdxElement": "SPDXRef-File-....github-workflows-nightly.yml-498c3882053e4800", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-263ce7e375a9df81", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-oauth2-proxy-mockoidc-26c1d5025cfeb741", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-28fa02a12896cbbd", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-docker-setup-buildx-action-2977a47c6b169473", "relatedSpdxElement": "SPDXRef-File-....github-workflows-nightly.yml-498c3882053e4800", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-munnerz-goautoneg-2d33de0c2e03c980", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-cncf-prow-github-actions-2d97487249a77939", "relatedSpdxElement": "SPDXRef-File-....github-workflows-prow.yml-780e0a0d56289ef2", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-subosito-gotenv-2db166198c302bc1", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-2e5e2097a23c0dc3", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-oauth2-2e730bac8336b8f7", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-docker-setup-qemu-action-2efc6d62dfcb905f", "relatedSpdxElement": "SPDXRef-File-....github-workflows-ci.yml-9ac397ae99d7ae00", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-github-codeql-action-analyze-31a905edfc330b2a", "relatedSpdxElement": "SPDXRef-File-....github-workflows-codeql.yml-f8476e0bd85419ba", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-32618e8e11e06ce6", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-docker-setup-buildx-action-35c7862c64e0c4f7", "relatedSpdxElement": "SPDXRef-File-....github-workflows-ci.yml-9ac397ae99d7ae00", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-checkout-35e2a1bf4f6b0a82", "relatedSpdxElement": "SPDXRef-File-....github-workflows-ci.yml-9ac397ae99d7ae00", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-setup-go-36131aaf8fc5a72e", "relatedSpdxElement": "SPDXRef-File-....github-workflows-publish-release.yml-ac540a0098332f55", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-redis-go-redis-v9-366c5cf8a847aa61", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-docker-setup-buildx-action-36d556d9b75cb2f1", "relatedSpdxElement": "SPDXRef-File-....github-workflows-publish-release.yml-ac540a0098332f55", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-docker-login-action-385e3367f6f52daf", "relatedSpdxElement": "SPDXRef-File-....github-workflows-publish-release.yml-ac540a0098332f55", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-yuin-gopher-lua-38688f919ed19205", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-tools-396df050f7c8cf3b", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gorilla-mux-3aaebf4b073c46e0", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-onsi-ginkgo-v2-3c8ceb74af469bef", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-workflow-oauth2-proxy-e2e-suite-.github-workflows-e2e.yml-3eba72a0c8ba3391", "relatedSpdxElement": "SPDXRef-File-....github-workflows-e2e.yml-69eac746a5a05010", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-44163de5007e6449", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-cmp-473d0adb4b419c7e", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-api-4974decf7a98c76e", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-natefinch-lumberjack.v2-49f92b8296741bb6", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-4a6f2b06f0d05a0b", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-4a7180a3454dcfdc", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v3-4b4ab9782c56aa12", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-beorn7-perks-4b7f4d17e7911c1a", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-oidc-v3-4e56df7d27d0028e", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-munnerz-goautoneg-4eecb2fd1e5060d0", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-4f6bbb5ea857a60b", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-4fc93c87aeebc64b", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-50bf6051e43e2577", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cast-52510dd115dd69fa", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-5265f5ea4618671c", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-a8m-envsubst-539e83ff052d6016", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-a8m-envsubst-53b4b9cf69cad2d0", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-viper-53bb8bba12e970aa", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-54bcc746f2ab7987", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-mod-56d232e7120c3a8b", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-task-slim-sprig-v3-5722741857d8df35", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-afero-577ab40ea4ceaedf", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-597f7402c3293169", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-5b63f3b6f34be6b1", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-upload-pages-artifact-5d2a90a8cdaf5eef", "relatedSpdxElement": "SPDXRef-File-....github-workflows-docs.yml-5aa70a599edfceed", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-5d64ad5913a6841c", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-beorn7-perks-665af737e55ce3c2", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-oauth2-6940de185fda9158", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-69e67edfc2286e18", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-checkout-6bfd576f59412e31", "relatedSpdxElement": "SPDXRef-File-....github-workflows-docs.yml-5aa70a599edfceed", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-6c9f2d9b94332387", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-704e64a96653ce86", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-onsi-ginkgo-v2-70f5ac54131250b3", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-7113956b3044706b", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kylelemons-godebug-7172fe198b74604b", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-alicebob-miniredis-v2-717b92d4866a5ff0", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bitly-go-simplejson-719e0d3c39745a1f", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-73529cb77374f1e3", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-73c3bac49799b9a7", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-75058587b03d7e92", "relatedSpdxElement": "SPDXRef-File-...github.com-pierrec-lz4-v4-lz4.test-7428caa659fe504a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-772ff23bb73b8a11", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-79907ade3a90e953", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bitly-go-simplejson-79f42cff34b4736e", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bsm-redislock-7b4c9102dd752ff5", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-7c26c270e5bef730", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-7c81faf1d434beda", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-deploy-pages-7dcf43534c68e123", "relatedSpdxElement": "SPDXRef-File-....github-workflows-docs.yml-5aa70a599edfceed", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-8006676545aab105", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-configure-pages-82d6211ad35df606", "relatedSpdxElement": "SPDXRef-File-....github-workflows-docs.yml-5aa70a599edfceed", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-viper-83fd8b1ff0160f5a", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-846218cc16a209df", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-84fe57d074f771b1", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-85fe5d3cf0b45397", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-8648c397b90bda9d", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-labeler-876ca18109bab6a9", "relatedSpdxElement": "SPDXRef-File-....github-workflows-labeler.yml-9654aabda1a01f03", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-procfs-878089afee5fa76e", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-8946d0e2b7ce5ab6", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.uber.org-atomic-8997eafd4641c55f", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-aquasecurity-trivy-action-8acea4fb182b1f65", "relatedSpdxElement": "SPDXRef-File-....github-workflows-ci.yml-9ac397ae99d7ae00", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-justinas-alice-8d61132370c99886", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-8e426af775fa3244", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-api-8f3e131e029c644f", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-natefinch-lumberjack.v2-90894027420d5ecf", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-setup-go-90be7a13f39b2ce8", "relatedSpdxElement": "SPDXRef-File-....github-workflows-ci.yml-9ac397ae99d7ae00", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vmihailenco-msgpack-v5-997b5609b93d68dc", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-task-slim-sprig-v3-9af3426fa0421261", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-a00544d9cf935bfa", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-a138f9b418ca24ef", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-s2a-go-a30ef8f4ba34534f", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-client-model-a37501789b93a9d0", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-setup-node-a40b1a64d1ccb26b", "relatedSpdxElement": "SPDXRef-File-....github-workflows-create-release.yml-9440102cdcc86900", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-client-golang-a514cc48df50cef4", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-subosito-gotenv-a69fce9bf91b5e01", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-a77d899ac322040a", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-a9123a7cdb8224b1", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-ad57399cb3c994ee", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-cmp-b0a3722cb35a54a5", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-b46bfc1b76c1577d", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-b62b3b3e04deec42", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cast-b759ce340b0f2e0e", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-b8afb83cd9b4e104", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.uber.org-atomic-b8dac96e58dce7e2", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-checkout-b9dd365bfef5ae7a", "relatedSpdxElement": "SPDXRef-File-....github-workflows-nightly.yml-498c3882053e4800", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vmihailenco-tagparser-v2-ba1e7884e0038c7b", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v3-ba382b9b335aa2af", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-bb0aa2b6ed288b02", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-bee40c10035bd924", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-stretchr-testify-bf09dd4de3f75dc9", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-c1575fca953a051b", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Bose-minisentinel-c889598878e9a3c2", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-common-c8c93793ecc5c81b", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-afero-c8e91c46367c88c0", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-cd66f78e486cb96b", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Bose-minisentinel-ce4e34f9211926da", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-cee47eb18c6748a2", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-stale-d16a0edde18a5348", "relatedSpdxElement": "SPDXRef-File-....github-workflows-stale.yml-ca18ce9920b556e4", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-pprof-d2223d9d64e8300f", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-client-model-d2e473ad5b972368", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-client-golang-d49d501d6b2810b0", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-github-codeql-action-upload-sarif-d4bcd902c7019a23", "relatedSpdxElement": "SPDXRef-File-....github-workflows-ci.yml-9ac397ae99d7ae00", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-stretchr-testify-d64a25dace8d069c", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-upload-artifact-d7c3d65f5c1762d5", "relatedSpdxElement": "SPDXRef-File-....github-workflows-publish-release.yml-ac540a0098332f55", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-d91b6d6201c35c75", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-db9b423947e22092", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-dfab21274f47451f", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-dfffd5de5a221936", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vmihailenco-msgpack-v5-e0430ddb8d8f4945", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-docker-setup-qemu-action-e0e9caa57d2e8612", "relatedSpdxElement": "SPDXRef-File-....github-workflows-nightly.yml-498c3882053e4800", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-checkout-e22b886a617c0765", "relatedSpdxElement": "SPDXRef-File-....github-workflows-publish-release.yml-ac540a0098332f55", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-justinas-alice-e27b9d2d326a3321", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-checkout-e336aa4707aad530", "relatedSpdxElement": "SPDXRef-File-....github-workflows-create-release.yml-9440102cdcc86900", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-onsi-gomega-e4a068934626e35f", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-oidc-v3-e5919b0d2d6e62f0", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-stdlib-e92d03678c43fe24", "relatedSpdxElement": "SPDXRef-File-...github.com-pierrec-lz4-v4-lz4.test-7428caa659fe504a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-e9572a682bc41143", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-ec9ed93888749dc0", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-ed7921825a53d3f4", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-setup-node-edc6f6e334641214", "relatedSpdxElement": "SPDXRef-File-....github-workflows-docs.yml-5aa70a599edfceed", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-python-codespell-ee00abe66a169021", "relatedSpdxElement": "SPDXRef-File-...otel-requirements.txt-b69fd806af1e91ad", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-ee3f30d67a52a6c7", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-ef149a8ecfde8987", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-github-codeql-action-init-f100c24d2299a1e4", "relatedSpdxElement": "SPDXRef-File-....github-workflows-codeql.yml-f8476e0bd85419ba", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-f27770650f676674", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-f3ad52478ad4e78a", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-f6424607fde0264b", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-checkout-f66f7ddb8f79f50e", "relatedSpdxElement": "SPDXRef-File-....github-workflows-codeql.yml-f8476e0bd85419ba", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-onsi-gomega-f7610f61d316b75e", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-f9a727401b6a9791", "relatedSpdxElement": "SPDXRef-File-go.mod-3fc5a8d3d86e9790", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-redis-go-redis-v9-fc65783ae32d3bc6", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-ff688f44df0be420", "relatedSpdxElement": "SPDXRef-File-oauth2-proxy-7.15.5-go.mod-2029b36838bf7f6b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-checkout-35e2a1bf4f6b0a82", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-checkout-f66f7ddb8f79f50e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-checkout-e336aa4707aad530", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-checkout-6bfd576f59412e31", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-checkout-b9dd365bfef5ae7a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-checkout-e22b886a617c0765", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-configure-pages-82d6211ad35df606", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-deploy-pages-7dcf43534c68e123", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-labeler-876ca18109bab6a9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-setup-go-90be7a13f39b2ce8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-setup-go-36131aaf8fc5a72e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-setup-node-a40b1a64d1ccb26b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-setup-node-edc6f6e334641214", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-stale-d16a0edde18a5348", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-upload-artifact-d7c3d65f5c1762d5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-upload-pages-artifact-5d2a90a8cdaf5eef", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-aquasecurity-trivy-action-8acea4fb182b1f65", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-auth-ee3f30d67a52a6c7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-auth-a77d899ac322040a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-db9b423947e22092", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-846218cc16a209df", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-c1575fca953a051b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-85fe5d3cf0b45397", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-cncf-prow-github-actions-2d97487249a77939", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-python-codespell-ee00abe66a169021", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-docker-login-action-234893657f3f708f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-docker-login-action-385e3367f6f52daf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-docker-setup-buildx-action-35c7862c64e0c4f7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-docker-setup-buildx-action-2977a47c6b169473", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-docker-setup-buildx-action-36d556d9b75cb2f1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-docker-setup-qemu-action-2efc6d62dfcb905f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-docker-setup-qemu-action-e0e9caa57d2e8612", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-docker-setup-qemu-action-1bc474989a71a1d2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Bose-minisentinel-ce4e34f9211926da", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Bose-minisentinel-c889598878e9a3c2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-bb0aa2b6ed288b02", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-4a6f2b06f0d05a0b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-a8m-envsubst-53b4b9cf69cad2d0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-a8m-envsubst-539e83ff052d6016", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-alicebob-miniredis-v2-0b57e7b5be7ad969", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-alicebob-miniredis-v2-717b92d4866a5ff0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-beorn7-perks-4b7f4d17e7911c1a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-beorn7-perks-665af737e55ce3c2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bitly-go-simplejson-79f42cff34b4736e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bitly-go-simplejson-719e0d3c39745a1f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bsm-redislock-0595d34521830333", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bsm-redislock-7b4c9102dd752ff5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-44163de5007e6449", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-772ff23bb73b8a11", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-coreos-go-oidc-v3-e5919b0d2d6e62f0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-coreos-go-oidc-v3-4e56df7d27d0028e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-dfab21274f47451f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-f3ad52478ad4e78a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-21924c216340421a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-07f46c4978384982", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-73529cb77374f1e3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-7c26c270e5bef730", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v3-4b4ab9782c56aa12", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v3-ba382b9b335aa2af", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-05eb82ff5b803225", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-cee47eb18c6748a2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-logr-5d64ad5913a6841c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-logr-ff688f44df0be420", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-stdr-ed7921825a53d3f4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-stdr-79907ade3a90e953", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-task-slim-sprig-v3-5722741857d8df35", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-task-slim-sprig-v3-9af3426fa0421261", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-69e67edfc2286e18", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-b8afb83cd9b4e104", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-a9123a7cdb8224b1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-5b63f3b6f34be6b1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-cmp-473d0adb4b419c7e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-cmp-b0a3722cb35a54a5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-pprof-0f80dceb464406c3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-pprof-d2223d9d64e8300f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-s2a-go-a30ef8f4ba34534f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-s2a-go-22bdda956c4ad01a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-uuid-f6424607fde0264b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-uuid-a138f9b418ca24ef", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-ad57399cb3c994ee", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-8006676545aab105", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-7c81faf1d434beda", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-dfffd5de5a221936", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gorilla-mux-3aaebf4b073c46e0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gorilla-mux-1c336ba736cfbc03", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-justinas-alice-e27b9d2d326a3321", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-justinas-alice-8d61132370c99886", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-kylelemons-godebug-054bf546a3d78ff8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-kylelemons-godebug-7172fe198b74604b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-munnerz-goautoneg-2d33de0c2e03c980", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-munnerz-goautoneg-4eecb2fd1e5060d0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-mockoidc-26c1d5025cfeb741", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-mockoidc-113c526798afb772", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-onsi-ginkgo-v2-3c8ceb74af469bef", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-onsi-ginkgo-v2-70f5ac54131250b3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-onsi-gomega-f7610f61d316b75e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-onsi-gomega-e4a068934626e35f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-d91b6d6201c35c75", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-8648c397b90bda9d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-75058587b03d7e92", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-e9572a682bc41143", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-597f7402c3293169", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-prometheus-client-golang-a514cc48df50cef4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-prometheus-client-golang-d49d501d6b2810b0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-prometheus-client-model-a37501789b93a9d0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-prometheus-client-model-d2e473ad5b972368", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-prometheus-common-0f58d85c7e917ff8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-prometheus-common-c8c93793ecc5c81b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-prometheus-procfs-878089afee5fa76e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-prometheus-procfs-0ef72c0ebd3b9e95", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-redis-go-redis-v9-366c5cf8a847aa61", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-redis-go-redis-v9-fc65783ae32d3bc6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-704e64a96653ce86", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-b46bfc1b76c1577d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-afero-577ab40ea4ceaedf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-afero-c8e91c46367c88c0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-cast-b759ce340b0f2e0e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-cast-52510dd115dd69fa", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-pflag-ec9ed93888749dc0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-pflag-7113956b3044706b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-viper-53bb8bba12e970aa", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-viper-83fd8b1ff0160f5a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-stretchr-testify-d64a25dace8d069c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-stretchr-testify-bf09dd4de3f75dc9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-subosito-gotenv-2db166198c302bc1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-subosito-gotenv-a69fce9bf91b5e01", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vmihailenco-msgpack-v5-997b5609b93d68dc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vmihailenco-msgpack-v5-e0430ddb8d8f4945", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vmihailenco-tagparser-v2-ba1e7884e0038c7b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vmihailenco-tagparser-v2-222d59278bef4f28", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-yuin-gopher-lua-38688f919ed19205", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-yuin-gopher-lua-1fe780299c4cc589", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-github-codeql-action-analyze-31a905edfc330b2a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-github-codeql-action-autobuild-1a727b06868c6d1b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-github-codeql-action-init-f100c24d2299a1e4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-github-codeql-action-upload-sarif-d4bcd902c7019a23", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-a00544d9cf935bfa", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-b62b3b3e04deec42", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-2e5e2097a23c0dc3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-157b8ddd112253dc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-f27770650f676674", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-84fe57d074f771b1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-f9a727401b6a9791", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-32618e8e11e06ce6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-8e426af775fa3244", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-4f6bbb5ea857a60b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.uber.org-atomic-8997eafd4641c55f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.uber.org-atomic-b8dac96e58dce7e2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-4fc93c87aeebc64b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-6c9f2d9b94332387", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-crypto-4a7180a3454dcfdc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-crypto-73c3bac49799b9a7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-mod-56d232e7120c3a8b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-mod-1a4f31dfee761654", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-net-50bf6051e43e2577", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-net-5265f5ea4618671c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-oauth2-2e730bac8336b8f7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-oauth2-6940de185fda9158", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sync-1c59d62db54de586", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sync-cd66f78e486cb96b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sys-22bf94b873e909e4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sys-ef149a8ecfde8987", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-text-8946d0e2b7ce5ab6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-text-1782e870745f5986", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-tools-1d0c1f0fc356ce03", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-tools-396df050f7c8cf3b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-api-4974decf7a98c76e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-api-8f3e131e029c644f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-28fa02a12896cbbd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-bee40c10035bd924", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-grpc-54bcc746f2ab7987", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-grpc-032d64e7b2c5e72b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-protobuf-0055873c0ce1a39b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-protobuf-263ce7e375a9df81", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-gopkg.in-natefinch-lumberjack.v2-49f92b8296741bb6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-gopkg.in-natefinch-lumberjack.v2-90894027420d5ecf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-workflow-oauth2-proxy-e2e-suite-.github-workflows-e2e.yml-3eba72a0c8ba3391", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-qltysh-qlty-action-coverage-1d3d07a58487dd04", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-stdlib-e92d03678c43fe24", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.src"}, {"spdxElementId": "SPDXRef-Package-rpm-oauth2-proxy-61976c8471972b64", "relatedSpdxElement": "SPDXRef-File-...oauth2-proxy-7.15.5-0.1.hum1.aarch64.debug-d0595015f54763b7", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-debuginfo-7.15.5-0.1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-rpm-oauth2-proxy-61976c8471972b64", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-oauth2-proxy-debuginfo-7.15.5-0.1.hum1.aarch64", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-aarch64-oauth2-proxy-debuginfo", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-oauth2-proxy-debuginfo-7.15.5-0.1.hum1.aarch64"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-oauth2-proxy-debugsource-7.15.5-0.1.hum1.aarch64", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-aarch64-oauth2-proxy-debugsource", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-oauth2-proxy-debugsource-7.15.5-0.1.hum1.aarch64"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bitly-go-simplejson-0a8bcb248eccba3a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v3-0d2fde32c34d0005", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-174ea8b83429f46a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-1cbd6361c8e4626b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-21cb0dd8e257f102", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-2b9244e9f52954a8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-stdlib-2c42485889b8fda2", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-beorn7-perks-2d1c436883816ba0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-2d8ac36729f5ca8c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-s2a-go-33af57ae3890155f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-3b97f45bf98bb751", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-3df63e55668c61a1", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-3f2b4cabd1ec68b3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vmihailenco-tagparser-v2-3f52a5b807e53810", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-4fad0347362a3c70", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-58935338c677fef7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-5b043773d4c09eb4", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-5c2d0a3b3e07bd9e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-5f43fedbab9a3790", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-client-model-65b34217fd67747f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-6d618e2d79de155b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-6db5391b1adda5f6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-afero-72c2cb05f7aa4de4", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gorilla-mux-72c451d1035c4ca5", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-787d4adeda14b912", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-client-golang-7f00725835fc4de7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-7ff40584371fde96", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-81ff13065ca8d780", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-procfs-937c2df5f1370fbf", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-natefinch-lumberjack.v2-9746d7179f41ed6f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-979be3a779ba48c7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-9bc2dc8bde79c11c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-9e9a24b71cbb19e7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-9f2237f2244db918", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-oauth2-a2686f3a4fe008cc", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-a2750cbc0a6eec68", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-oidc-v3-a4a377b29b2fe283", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-a6015b03813f9ca4", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-a944e8ac6e97183f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.uber.org-atomic-a9a92573a401cfb0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cast-b2e8cbaecb041cae", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-justinas-alice-b3b7b27d3c37b6cc", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-redis-go-redis-v9-b3f7cd928233ec77", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-baa9f7b013339354", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-bcd964e6b168aa67", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-bdd8e9da61b23d1b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-viper-bec3802e8a634615", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-common-c1097608542e286e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-cde1a31bc9b77b0e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vmihailenco-msgpack-v5-d9453490f5d06693", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-api-dc910c3153ecf387", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-e25a6477992833ee", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-e4772e27db8bbb1e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-munnerz-goautoneg-e521c77e5d7f6d16", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bsm-redislock-eb848350693389c5", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-subosito-gotenv-f163a1ba655b9e78", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-a8m-envsubst-f391e4bfd14b1376", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-f90035a7c4571ca9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-fe381137a5873e1c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bitly-go-simplejson-0a8bcb248eccba3a", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v3-0d2fde32c34d0005", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-174ea8b83429f46a", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-1cbd6361c8e4626b", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-21cb0dd8e257f102", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-2b9244e9f52954a8", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-stdlib-2c42485889b8fda2", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-beorn7-perks-2d1c436883816ba0", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-2d8ac36729f5ca8c", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-s2a-go-33af57ae3890155f", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-3b97f45bf98bb751", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-3df63e55668c61a1", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-3f2b4cabd1ec68b3", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vmihailenco-tagparser-v2-3f52a5b807e53810", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-rpm-oauth2-proxy-4d3d11c07cc947c0", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-4fad0347362a3c70", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-58935338c677fef7", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-5b043773d4c09eb4", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-5c2d0a3b3e07bd9e", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-5f43fedbab9a3790", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-client-model-65b34217fd67747f", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-6d618e2d79de155b", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-6db5391b1adda5f6", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-afero-72c2cb05f7aa4de4", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gorilla-mux-72c451d1035c4ca5", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-787d4adeda14b912", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-client-golang-7f00725835fc4de7", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-7ff40584371fde96", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-81ff13065ca8d780", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-procfs-937c2df5f1370fbf", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-natefinch-lumberjack.v2-9746d7179f41ed6f", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-979be3a779ba48c7", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-9bc2dc8bde79c11c", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-9e9a24b71cbb19e7", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-9f2237f2244db918", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-oauth2-a2686f3a4fe008cc", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-a2750cbc0a6eec68", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-oidc-v3-a4a377b29b2fe283", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-a6015b03813f9ca4", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-a944e8ac6e97183f", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.uber.org-atomic-a9a92573a401cfb0", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cast-b2e8cbaecb041cae", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-justinas-alice-b3b7b27d3c37b6cc", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-redis-go-redis-v9-b3f7cd928233ec77", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-baa9f7b013339354", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-bcd964e6b168aa67", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-bdd8e9da61b23d1b", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-viper-bec3802e8a634615", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-prometheus-common-c1097608542e286e", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-cde1a31bc9b77b0e", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vmihailenco-msgpack-v5-d9453490f5d06693", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-api-dc910c3153ecf387", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-e25a6477992833ee", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-e4772e27db8bbb1e", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-munnerz-goautoneg-e521c77e5d7f6d16", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bsm-redislock-eb848350693389c5", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-subosito-gotenv-f163a1ba655b9e78", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-a8m-envsubst-f391e4bfd14b1376", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-f90035a7c4571ca9", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-fe381137a5873e1c", "relatedSpdxElement": "SPDXRef-File-usr-bin-oauth2-proxy-acdc1d845b03b55b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-auth-5f43fedbab9a3790", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-a944e8ac6e97183f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-a6015b03813f9ca4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-a8m-envsubst-f391e4bfd14b1376", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-beorn7-perks-2d1c436883816ba0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bitly-go-simplejson-0a8bcb248eccba3a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bsm-redislock-eb848350693389c5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-7ff40584371fde96", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-coreos-go-oidc-v3-a4a377b29b2fe283", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-e25a6477992833ee", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-3f2b4cabd1ec68b3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-58935338c677fef7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v3-0d2fde32c34d0005", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-9e9a24b71cbb19e7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-logr-fe381137a5873e1c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-stdr-787d4adeda14b912", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-21cb0dd8e257f102", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-bcd964e6b168aa67", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-s2a-go-33af57ae3890155f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-uuid-979be3a779ba48c7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-2d8ac36729f5ca8c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-a2750cbc0a6eec68", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gorilla-mux-72c451d1035c4ca5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-justinas-alice-b3b7b27d3c37b6cc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-munnerz-goautoneg-e521c77e5d7f6d16", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-oauth2-proxy-oauth2-proxy-v7-37c9ff5fd8a6a3f4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-2b9244e9f52954a8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-9f2237f2244db918", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-prometheus-client-golang-7f00725835fc4de7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-prometheus-client-model-65b34217fd67747f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-prometheus-common-c1097608542e286e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-prometheus-procfs-937c2df5f1370fbf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-redis-go-redis-v9-b3f7cd928233ec77", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-bdd8e9da61b23d1b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-afero-72c2cb05f7aa4de4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-cast-b2e8cbaecb041cae", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-pflag-3df63e55668c61a1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-viper-bec3802e8a634615", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-subosito-gotenv-f163a1ba655b9e78", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vmihailenco-msgpack-v5-d9453490f5d06693", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vmihailenco-tagparser-v2-3f52a5b807e53810", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-3b97f45bf98bb751", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-174ea8b83429f46a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-81ff13065ca8d780", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-5b043773d4c09eb4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-4fad0347362a3c70", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.uber.org-atomic-a9a92573a401cfb0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-5c2d0a3b3e07bd9e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-crypto-6db5391b1adda5f6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-net-cde1a31bc9b77b0e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-oauth2-a2686f3a4fe008cc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sync-9bc2dc8bde79c11c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sys-e4772e27db8bbb1e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-text-baa9f7b013339354", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-api-dc910c3153ecf387", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-1cbd6361c8e4626b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-grpc-f90035a7c4571ca9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-protobuf-6d618e2d79de155b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-gopkg.in-natefinch-lumberjack.v2-9746d7179f41ed6f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-rpm-oauth2-proxy-4d3d11c07cc947c0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-stdlib-2c42485889b8fda2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-x86-64-oauth2-proxy", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-oauth2-proxy-7.15.5-0.1.hum1.x86-64"}, {"spdxElementId": "SPDXRef-Package-rpm-oauth2-proxy-a4ffec08a57c8b23", "relatedSpdxElement": "SPDXRef-File-...oauth2-proxy-7.15.5-0.1.hum1.x86-64.debug-1bc967a26b9ce7e8", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-oauth2-proxy-debuginfo-7.15.5-0.1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-rpm-oauth2-proxy-a4ffec08a57c8b23", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-oauth2-proxy-debuginfo-7.15.5-0.1.hum1.x86-64", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-x86-64-oauth2-proxy-debuginfo", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-oauth2-proxy-debuginfo-7.15.5-0.1.hum1.x86-64"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-oauth2-proxy-debugsource-7.15.5-0.1.hum1.x86-64", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-x86-64-oauth2-proxy-debugsource", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-oauth2-proxy-debugsource-7.15.5-0.1.hum1.x86-64"}], "documentDescribes": ["SPDXRef-SRPM", "SPDXRef-aarch64-oauth2-proxy", "SPDXRef-x86-64-oauth2-proxy", "SPDXRef-aarch64-oauth2-proxy-debuginfo", "SPDXRef-x86-64-oauth2-proxy-debuginfo", "SPDXRef-aarch64-oauth2-proxy-debugsource", "SPDXRef-x86-64-oauth2-proxy-debugsource"]}